CVE-2008-3024: Buffer Overflow
Published Jul 7, 2008
·Updated
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.
Affected Software
1 affected component
BlackBerry Qnx Momentics<=6.3.2
Event History
Jul 7, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-3024?
CVE-2008-3024 is rated as high severity due to its potential for local privilege escalation.
2
How do I fix CVE-2008-3024?
To mitigate CVE-2008-3024, upgrade QNX Momentics to a version later than 6.3.2.
3
Who is affected by CVE-2008-3024?
Local users of QNX Momentics version 6.3.2 and earlier are affected by CVE-2008-3024.
4
What types of attacks can be executed using CVE-2008-3024?
CVE-2008-3024 can allow local users to execute arbitrary code with elevated privileges.
5
What software is mentioned in CVE-2008-3024?
CVE-2008-3024 specifically affects the phgrafx component of QNX Momentics RTOS.