CVE-2008-3024 Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.
HighCVSS 9.3
EPSS 5.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| blackberry qnx momentics | <= 6.3.2 | No fix listed |
References
- 30808 third-party-advisory
- 3974 exploit third-party-advisory
- www.scanit.net broken-link
- 20080701 [SCANIT-2008-001] QNX phgrafx Privilege Escalation Vulnerability exploit mailing-list third-party-advisory vdb-entry
- 30024 exploit third-party-advisory vdb-entry
- 1020411 third-party-advisory vdb-entry
- ADV-2008-1996 third-party-advisory vdb-entry
- momentics-phgrafx-bo(43542) third-party-advisory vdb-entry