NASA Ames Research Center BigView 1.8 - (.PNM File) Stack-Based Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/29517/info NASA Ames Research Center BigView is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory...

NASA BigView buffer overflow

PNM images parsing buffer overflow...

CORE-2008-0425 - NASA BigView Stack Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ NASA BigView Stack Buffer Overflow Advisory Information Title: NASA BigView Stack Buffer Overflow Advisory ID: CORE-2008-0425 Advisory URL:...

NASA BigView PNM文件处理栈溢出漏洞

BUGTRAQ ID: 29517 CVECAN ID: CVE-2008-2542 BigView是NASA开发的图形查看器，可在运行Linux的桌面PC上将图形拉伸和缩放到任意尺寸。 BigView在解析特制的PNM输入文件时存在栈溢出漏洞，攻击者可能利用此漏洞通过诱使用户处理恶意文件控制用户系统。 以下是Ppm/ppm.C文件中的漏洞代码。这里getline函数从文件将数据读取到缓冲区： /----------- 418 static void getlineint fin, char lineBuf, int len 419 420 bool done=false; 421 in...

CVE-2008-2542

CVE-2008-2542 affects NASA BigView 1.8. The vulnerability is a stack overflow in the getline path used when parsing PNM headers (lineBuf[512] in Ppm/ppm.C). A crafted PNM file can overflow the 512-byte buffer, potentially allowing arbitrary code execution. The CoreLabs advisory confirms the issue...

Core Security Technologies Advisory 2008.0425

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ NASA BigView Stack Buffer Overflow Advisory Information Title: NASA BigView Stack Buffer Overflow Advisory ID: CORE-2008-0425 Advisory URL:...

NASA Ames Research Center BigView 1.8 - .PNM Stack Buffer Overflow (PoC)

NASA Ames Research Center BigView 1.8 - .PNM Stack Buffer Overflow PoC source: https://www.securityfocus.com/bid/29517/info NASA Ames Research Center BigView is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying ...

NASA BigView Stack Buffer Overflow

Advisory ID Internal CORE-2008-0425 Advisory Information: Title: NASA BigView Stack Buffer Overflow Advisory ID: CORE-2008-0425 Advisory URL:https://www.coresecurity.com/core-labs/advisories/nasa-big-view Date published: 2008-06-04 Date of last update: 2008-06-03 Vendors contacted: NASA Ames...

NASA Ames Research Center BigView 1.8 - '.PNM' Stack Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/29517/info NASA Ames Research Center BigView is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. An attacker can exploit th...