CVE-2008-2427

Related Files

secunia-xnview.txt

Posted Jun 20, 2008

Authored by Stefan Cornelius | Site secunia.com

Secunia Research has discovered a vulnerability in XnView, NConvert, and GFL SDK, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when processing the "format" keyword of Sun TAAC files. This can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into viewing a specially crafted Sun TAAC file. Successful exploitation allows execution of arbitrary code. The vulnerability is confirmed in version 1.70 of XnView for Linux and FreeBSD, XnView 1.93.6 for Windows, GFL SDK 2.82, and NConvert 4.92. Other versions may also be affected.

tags | advisory, overflow, arbitrary

systems | linux, windows, freebsd

advisories | CVE-2008-2427

SHA-256 | 6d513fbba9ac630cb473e7094e4a5581a9466f3b53e85402becb12abda7c023e

Download | Favorite | View