NASA BigView Stack Buffer Overflow

Advisory ID Internal CORE-2008-0425 Advisory Information: Title: NASA BigView Stack Buffer Overflow Advisory ID: CORE-2008-0425 Advisory URL:https://www.coresecurity.com/core-labs/advisories/nasa-big-view Date published: 2008-06-04 Date of last update: 2008-06-03 Vendors contacted: NASA Ames...

CDF库src/lib/cdfread64.c文件栈溢出漏洞

BUGTRAQ ID: 29045 CVECAN ID: CVE-2008-2080 通用数据格式（CDF）是由NASA戈达德航天飞行中心开发的用于存储和操控标量和多维数据的数据格式。 CDF库在打开无效的CDF输入文件时存在栈溢出漏洞，允许攻击者在使用该库的应用程序环境中执行任意指令或导致整个应用程序崩溃。 漏洞存在于src/lib/cdfread64.c文件的以下代码中。Read32s64函数将数据从文件读取到缓冲区，temp缓冲区大小为MAXREAD32s，但没有检查count参数，因此大于MAXREAD32s的参数可能会触发栈溢出。 /----------- 57...

Stack overflow

Stack-based buffer overflow in the Read32s64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format CDF library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags...

CVE-2008-2080

Stack-based buffer overflow in the Read32s64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format CDF library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags...

CVE-2008-2080

The CVE-2008-2080 issue affects the NASA Goddard Space Flight Center Common Data Format (CDF) library up to version 3.2.0, where a stack-based buffer overflow in Read32s_64 (src/lib/cdfread64.c) can be triggered by specially crafted CDF files with invalid length tags. The underlying cause is impr...

NASA's Common Data Format Buffer Overflow

Advisory ID Internal CORE-2008-0326 Advisory Information: Advisory ID: CORE-2008-0326 Advisory URL:https://www.coresecurity.com/?action=item&id=2260 Date published: 2008-05-05 Date of last update: 2008-05-05 Vendors contacted: GODDARD Space Flight Center Release mode: Coordinated release...

Core Security Technologies Advisory 2008.0326

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ NASA's Common Data Format buffer overflow Advisory Information Title: NASA's Common Data Format buffer overflow Advisory ID: CORE-2008-0326 Advisory URL:...