Description
Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding (RLE) compression that produces more data than expected when decoding.
References
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=52
- 20070718 Microsoft DirectX RLE Compressed Targa Image File Heap Overflow Vulnerability third-party-advisory
- 1018420 vdb-entry
- 24963 vdb-entry
- directx-targa-bo(35492) vdb-entry
- 26131 third-party-advisory
- 20070718 [Reversemode Advisory] Microsoft DirectX RLE Compressed Targa Image File Heap Overflow mailing-list
- ADV-2007-2577 vdb-entry