CVE-2005-3662

Off-by-one buffer overflow in pnmtopng before 2.39, when using the -alpha command line option (Alphas_Of_Color), allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted PNM file with exactly 256 colors.

• CWE-119

• ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
• http://secunia.com/advisories/17544Patch, Vendor Advisory
• http://secunia.com/advisories/17671Vendor Advisory
• http://secunia.com/advisories/17679Vendor Advisory
• http://secunia.com/advisories/17828Vendor Advisory
• http://secunia.com/advisories/18186Vendor Advisory
• http://secunia.com/advisories/18517Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=370545
• http://www.debian.org/security/2005/dsa-904
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:217
• http://www.novell.com/linux/security/advisories/2005_28_sr.html
• http://www.redhat.com/support/errata/RHSA-2005-843.html
• http://www.securityfocus.com/bid/15427
• http://www.vupen.com/english/advisories/2005/2418Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9583
• https://usn.ubuntu.com/218-1/
• ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
• http://secunia.com/advisories/17544Patch, Vendor Advisory
• http://secunia.com/advisories/17671Vendor Advisory
• http://secunia.com/advisories/17679Vendor Advisory
• http://secunia.com/advisories/17828Vendor Advisory
• http://secunia.com/advisories/18186Vendor Advisory
• http://secunia.com/advisories/18517Vendor Advisory
• http://sourceforge.net/project/shownotes.php?release_id=370545
• http://www.debian.org/security/2005/dsa-904
• http://www.mandriva.com/security/advisories?name=MDKSA-2005:217
• http://www.novell.com/linux/security/advisories/2005_28_sr.html
• http://www.redhat.com/support/errata/RHSA-2005-843.html
• http://www.securityfocus.com/bid/15427
• http://www.vupen.com/english/advisories/2005/2418Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9583
• https://usn.ubuntu.com/218-1/

Published

Nov 18, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-3656Multiple format string vulnerabilities in logging functions …
• CVE-2005-3657The ActiveX control in MCINSCTL.DLL for McAfee VirusScan Sec…
• CVE-2005-3658Multiple heap-based buffer overflows in EMC Legato NetWorker…
• CVE-2005-3659nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.…
• CVE-2005-3660Linux kernel 2.4 and 2.6 allows attackers to cause a denial …
• CVE-2005-3661Dell TrueMobile 2300 Wireless Broadband Router running firmw…
• CVE-2005-3663Unquoted Windows search path vulnerability in Kaspersky Anti…
• CVE-2005-3664Heap-based buffer overflow in Kaspersky Anti-Virus Engine, a…
• CVE-2005-3665Multiple cross-site scripting (XSS) vulnerabilities in phpMy…
• CVE-2005-3666Multiple unspecified format string vulnerabilities in multip…
• CVE-2005-3667Multiple unspecified vulnerabilities in multiple unspecified…
• CVE-2005-3668Multiple buffer overflows in multiple unspecified implementa…