EUVD-2008-0077

Malware in sbrugna...

XnView产品TAAC文件解析栈溢出漏洞

BUGTRAQ ID: 29851 CVECAN ID: CVE-2008-2427 XnView是一款浏览的图片查看器，支持多种图形格式。 XnView在处理Sun TAAC文件的format关键字时存在栈溢出漏洞，如果用户受骗打开了特制的Sun TAAC文件就会触发这个溢出，导致执行任意指令。 0 XnView XnView 1.93.6 for Windows XnView XnView 1.70 for Linux/FreeBSD XnView NConvert 4.92 XnView GFL SDK 2.82 XnView ------...

Stack overflow

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...

CVE-2008-2427

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...

CVE-2008-2427

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...

CVE-2008-2427

The CVE-2008-2427 issue affects XnView, NConvert, and GFL SDK: a stack-based buffer overflow when parsing the Sun TAAC file’s format keyword, impacting XnView 1.93.6 (Windows) and 1.70 (Linux/FreeBSD), NConvert 4.92, and GFL SDK 2.82. The root cause is a boundary/error in processing the format ke...

XnView / NConvert / GFL SDK buffer overflow

Buffer overflow on oversized Sun TAAC files 'format' field...

Secunia Research: XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow

====================================================================== Secunia Research 20/06/2008 - XnView, NConvert, and GFL SDK Sun TAAC Buffer Overflow - ====================================================================== Table of Contents Affected...

Stack overflow

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

Stack-based buffer overflow in Pierre-emmanuel Gougelet 1 XnView 1.91 and 1.92, 2 NConvert 4.85, and 3 libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE .hdr file...

CVE-2008-0064

CVE-2008-0064 is a stack-based buffer overflow vulnerability affecting XnView (versions 1.91/1.92), NConvert 4.85, and libgfl280.dll in GFL SDK 2.870 for Windows. The underlying bug is triggered while processing Radiance RGBE (.hdr) files, allowing a user‑assisted remote attacker to execute arbit...