CVE-2008-5262: Buffer Overflow

Published Jan 13, 2009

Updated

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/ilhdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file.

Affected Software

1 affected component

DevIL Developers Image Library=1.7.4

Event History

Jan 13, 2009

CVE Published

via MITRE·04:00 PM

Data Sourced

via MITRE·04:00 PM

Description

Frequently Asked Questions

Does exploitation require authentication?

No. The CVSS vector lists no authentication requirement (Au:N).

What attacker-controlled input triggers the issue?

The vulnerable function can be reached through a crafted Radiance RGBE image file. Exposure depends on whether an application processes untrusted RGBE files with the affected DevIL library.

What security properties can be affected?

The CVSS vector indicates partial impacts to confidentiality, integrity, and availability. Successful exploitation may allow arbitrary code execution.

CVE-2008-5262: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Does exploitation require authentication?

What attacker-controlled input triggers the issue?

What security properties can be affected?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require authentication?

What attacker-controlled input triggers the issue?

What security properties can be affected?