Description
Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE (aka .hdr) file.
References
- 4941 third-party-advisory
- http://secunia.com/secunia_research/2008-61/
- ADV-2009-0190 vdb-entry
- 33363 vdb-entry
- http://easyhdr.com/version.php
- 20090120 Secunia Research: EasyHDR Pro Radiance RGBE Buffer Overflow mailing-list
- 33468 third-party-advisory
- easyhdrpro-hdr-bo(48119) vdb-entry
- 51609 vdb-entry