CVE-2008-0064
GFL SDK 2.870, NConvert < 4.85, XnView < 1.91 - Stack-based Buffer Overflow via Radiance RGBE File
Title source: llmDescription
Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.
References (6)
Core 6
Core References
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2008-1/advisory
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28710
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0328
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0329
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/28326
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/27514
Scores
EPSS
0.0461
EPSS Percentile
90.6%
Details
CWE
CWE-119
Status
published
Products (3)
pierreegougelet/gfl_sdk
2.870
pierreegougelet/nconvert
< 4.85
pierreegougelet/xnview
< 1.91
Published
Jan 31, 2008
Tracked Since
Feb 18, 2026