Unscored CVE-2008-5263 EUVD-2008-5240GHSA-rcvm-w356-8p99

Multiple stack-based buffer overflows in the mt_codec::getHdrHead function in kernel/kls_hdr/fmt_codec_hdr.cpp in ksquirrel-libs 0.8.0 allo…

Published Feb 26, 2009 · Updated Aug 7, 2024 · Assigned by flexera

Description

Multiple stack-based buffer overflows in the mt_codec::getHdrHead function in kernel/kls_hdr/fmt_codec_hdr.cpp in ksquirrel-libs 0.8.0 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE image (aka .hdr file).

References

33469 third-party-advisory
ksquirrellibs-rgbe-bo(48901) vdb-entry
http://secunia.com/secunia_research/2008-63/
ADV-2009-0528 vdb-entry
33902 vdb-entry
20090225 Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows mailing-list