Lucene search
HistoryJan 31, 2008 - 8:00 p.m.
CVE-2008-0064
cve-2008-0064
buffer overflow
xnview
nconvert
gfl sdk 2.870
windows
remote code execution
radiance rgbe
hdr file
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.085 Low
EPSS
Percentile
94.5%
Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.
Affected configurations
Node
pierreegougeletgfl_sdkMatch2.870windows
ORpierreegougeletnconvertRange≤4.85
ORpierreegougeletxnviewRange≤1.91
ORpierreegougeletxnviewRange≤1.92
Related
nessus
nessus
XnView RGBE File Handling Buffer Overflow
2008-01-30 00:00:00
cvelist
cvelist
CVE-2008-0064
2008-01-31 19:30:00
nvd
nvd
CVE-2008-0064
2008-01-31 20:00:00
prion
prion
Stack overflow
2008-01-31 20:00:00
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
8 High
AI Score
Confidence
High
0.085 Low
EPSS
Percentile
94.5%
Related for CVE-2008-0064