142 matches found
DevIL RGBE文件解析栈溢出漏洞
BUGTRAQ ID: 33231 CVECAN ID: CVE-2008-5262 DevIL是Developer's Image Library是缩写，是用于开发具有图形加载功能应用程序的程序员用函数库。 DevIL库的src-IL/src/ilhdr.c文件中的iGetHdrHeader函数存在栈溢出漏洞。如果用户受骗加载了特制的Radiance RGBE文件，就可以触发这个溢出，导致执行任意代码。 DevIL 1.7.4 DevIL ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://openil.sourceforge.net/...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
DEBIAN-CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
Stack overflow
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
CVE-2008-5262
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
CVE-2008-5262
DevIL (image library) is affected by CVE-2008-5262 due to two boundary errors in iGetHdrHeader() (src-IL/src/il_hdr.c) that cause stack-based buffer overflows. The vulnerability, in DevIL 1.7.4, can be exploited by parsing a crafted Radiance RGBE file to potentially execute arbitrary code remotel...
DevIL library buffer overflow
Buffer overflow in iGetHdrHeader function on Radiance RGBE files processing...
CVE-2008-5262: Improper Restriction of Operations within the Bounds of a Memory Buffer
Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file...
Ubuntu: Security Advisory (USN-699-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-699-1: Blender vulnerabilities
It was discovered that Blender did not correctly handle certain malformed Radiance RGBE images. If a user were tricked into opening a .blend file containing a specially crafted Radiance RGBE image, an attacker could execute arbitrary code with the user's privileges. CVE-2008-1102 It was discovere...
CVE-2008-4978
radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/opt.fmt, b /tmp/out.fmt, c /tmp/tf.dat, d /tmp/gsf, e /tmp/sc.sh, f /tmp/il.pic, g /tmp/tl.pic, h /tmp/ds.pic, i /tmp/tfa, and j /tmp/sed temporary files, related to the 1 optics2rad, 2 pdelta, 3...
Code injection
radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/opt.fmt, b /tmp/out.fmt, c /tmp/tf.dat, d /tmp/gsf, e /tmp/sc.sh, f /tmp/il.pic, g /tmp/tl.pic, h /tmp/ds.pic, i /tmp/tfa, and j /tmp/sed temporary files, related to the 1 optics2rad, 2 pdelta, 3...
CVE-2008-4978
radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/opt.fmt, b /tmp/out.fmt, c /tmp/tf.dat, d /tmp/gsf, e /tmp/sc.sh, f /tmp/il.pic, g /tmp/tl.pic, h /tmp/ds.pic, i /tmp/tfa, and j /tmp/sed temporary files, related to the 1 optics2rad, 2 pdelta, 3...
CVE-2008-4978
radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/opt.fmt, b /tmp/out.fmt, c /tmp/tf.dat, d /tmp/gsf, e /tmp/sc.sh, f /tmp/il.pic, g /tmp/tl.pic, h /tmp/ds.pic, i /tmp/tfa, and j /tmp/sed temporary files, related to the 1 optics2rad, 2 pdelta, 3...
CVE-2008-4978
CVE-2008-4978 concerns Radiance 3R9+20080530. It describes a local privilege issue where an attacker could overwrite arbitrary files by exploiting a symlink race on temporary files (examples: /tmp/opt.fmt, /tmp/out#####.fmt, /tmp/tf#####.dat, /tmp/gsf#####, /tmp/sc#####.sh, /tmp/il#####.pic, /tmp...
CVE-2008-4978: Improper Link Resolution Before File Access
radiance 3R9+20080530 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/opt.fmt, b /tmp/out.fmt, c /tmp/tf.dat, d /tmp/gsf, e /tmp/sc.sh, f /tmp/il.pic, g /tmp/tl.pic, h /tmp/ds.pic, i /tmp/tfa, and j /tmp/sed temporary files, related to the 1 optics2rad, 2 pdelta, 3...
Fedora 7 : blender-2.45-14.fc7 (2008-3862)
Fix security issue CVE-2008-1102 / 443934 / SA29818: Blender Radiance RGBE Buffer Overflow Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible...