CVE-2008-0064 Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute...
HighCVSS 9.3
EPSS 4.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pierreegougelet gfl sdk | = 2.870 | No fix listed |
| pierreegougelet nconvert | <= 4.85 | No fix listed |
| pierreegougelet xnview | <= 1.91 | No fix listed |
| pierreegougelet xnview | <= 1.92 | No fix listed |
References
- 28326 patch third-party-advisory vendor-advisory
- 28710 third-party-advisory vendor-advisory
- secunia.com vendor-advisory
- 27514 vdb-entry
- ADV-2008-0328 vdb-entry
- ADV-2008-0329 vdb-entry