ISOMAN

CVE

CVE-2008-2427

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file.

Severity
HIGH
CVSS
9.3
Published
Modified

Linked Releases

DistributionReleaseStatusEvidence
FreeBSD15.0-RELEASE amd64 bootonlyunknownsource
FreeBSD15.0-RELEASE amd64 disc1unknownsource
FreeBSD15.0-RELEASE amd64 dvd1unknownsource
FreeBSD15.0-RELEASE amd64 memstickunknownsource
FreeBSD15.0-RELEASE amd64 mini-memstickunknownsource
FreeBSD15.0-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD15.0-RELEASE aarch64 pine64unknownsource
FreeBSD15.0-RELEASE aarch64 pinebookunknownsource
FreeBSD15.0-RELEASE aarch64 rock64unknownsource
FreeBSD15.0-RELEASE aarch64 rockpro64unknownsource
FreeBSD15.0-RELEASE aarch64 rpiunknownsource
FreeBSD15.0-RELEASE aarch64 bootonlyunknownsource
FreeBSD15.0-RELEASE aarch64 disc1unknownsource
FreeBSD15.0-RELEASE aarch64 dvd1unknownsource
FreeBSD15.0-RELEASE aarch64 memstickunknownsource
FreeBSD15.0-RELEASE aarch64 mini-memstickunknownsource
FreeBSD15.0-RELEASE powerpc64 bootonlyunknownsource
FreeBSD15.0-RELEASE powerpc64 disc1unknownsource
FreeBSD15.0-RELEASE powerpc64le bootonlyunknownsource
FreeBSD15.0-RELEASE powerpc64le disc1unknownsource
FreeBSD15.0-RELEASE riscv64 genericsdunknownsource
FreeBSD15.0-RELEASE riscv64 bootonlyunknownsource
FreeBSD15.0-RELEASE riscv64 disc1unknownsource
FreeBSD15.0-RELEASE riscv64 memstickunknownsource
FreeBSD15.0-RELEASE riscv64 mini-memstickunknownsource
FreeBSD14.4-RELEASE amd64 bootonlyunknownsource
FreeBSD14.4-RELEASE amd64 disc1unknownsource
FreeBSD14.4-RELEASE amd64 dvd1unknownsource
FreeBSD14.4-RELEASE amd64 memstickunknownsource
FreeBSD14.4-RELEASE amd64 mini-memstickunknownsource
FreeBSD14.4-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD14.4-RELEASE aarch64 pine64unknownsource
FreeBSD14.4-RELEASE aarch64 pinebookunknownsource
FreeBSD14.4-RELEASE aarch64 rock64unknownsource
FreeBSD14.4-RELEASE aarch64 rockpro64unknownsource
FreeBSD14.4-RELEASE aarch64 rpiunknownsource
FreeBSD14.4-RELEASE aarch64 bootonlyunknownsource
FreeBSD14.4-RELEASE aarch64 disc1unknownsource
FreeBSD14.4-RELEASE aarch64 dvd1unknownsource
FreeBSD14.4-RELEASE aarch64 memstickunknownsource
FreeBSD14.4-RELEASE aarch64 mini-memstickunknownsource
FreeBSD14.4-RELEASE i386 bootonlyunknownsource
FreeBSD14.4-RELEASE i386 disc1unknownsource
FreeBSD14.4-RELEASE i386 dvd1unknownsource
FreeBSD14.4-RELEASE i386 memstickunknownsource
FreeBSD14.4-RELEASE i386 mini-memstickunknownsource
FreeBSD14.4-RELEASE powerpc bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc disc1unknownsource
FreeBSD14.4-RELEASE powerpc64 bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc64 disc1unknownsource
FreeBSD14.4-RELEASE powerpc64le bootonlyunknownsource
FreeBSD14.4-RELEASE powerpc64le disc1unknownsource
FreeBSD14.4-RELEASE riscv64 genericsdunknownsource
FreeBSD14.4-RELEASE riscv64 bootonlyunknownsource
FreeBSD14.4-RELEASE riscv64 disc1unknownsource
FreeBSD14.4-RELEASE riscv64 memstickunknownsource
FreeBSD14.4-RELEASE riscv64 mini-memstickunknownsource
FreeBSD14.3-RELEASE amd64 bootonlyunknownsource
FreeBSD14.3-RELEASE amd64 disc1unknownsource
FreeBSD14.3-RELEASE amd64 dvd1unknownsource
FreeBSD14.3-RELEASE amd64 memstickunknownsource
FreeBSD14.3-RELEASE amd64 mini-memstickunknownsource
FreeBSD14.3-RELEASE aarch64 pine64-ltsunknownsource
FreeBSD14.3-RELEASE aarch64 pine64unknownsource
FreeBSD14.3-RELEASE aarch64 pinebookunknownsource
FreeBSD14.3-RELEASE aarch64 rock64unknownsource
FreeBSD14.3-RELEASE aarch64 rockpro64unknownsource
FreeBSD14.3-RELEASE aarch64 rpiunknownsource
FreeBSD14.3-RELEASE aarch64 bootonlyunknownsource
FreeBSD14.3-RELEASE aarch64 disc1unknownsource
FreeBSD14.3-RELEASE aarch64 dvd1unknownsource
FreeBSD14.3-RELEASE aarch64 memstickunknownsource
FreeBSD14.3-RELEASE aarch64 mini-memstickunknownsource
FreeBSD14.3-RELEASE i386 bootonlyunknownsource
FreeBSD14.3-RELEASE i386 disc1unknownsource
FreeBSD14.3-RELEASE i386 dvd1unknownsource
FreeBSD14.3-RELEASE i386 memstickunknownsource
FreeBSD14.3-RELEASE i386 mini-memstickunknownsource
FreeBSD14.3-RELEASE powerpc bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc disc1unknownsource
FreeBSD14.3-RELEASE powerpc64 bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc64 disc1unknownsource
FreeBSD14.3-RELEASE powerpc64le bootonlyunknownsource
FreeBSD14.3-RELEASE powerpc64le disc1unknownsource
FreeBSD14.3-RELEASE riscv64 genericsdunknownsource
FreeBSD14.3-RELEASE riscv64 bootonlyunknownsource
FreeBSD14.3-RELEASE riscv64 disc1unknownsource
FreeBSD14.3-RELEASE riscv64 memstickunknownsource
FreeBSD14.3-RELEASE riscv64 mini-memstickunknownsource

References

  1. http://secunia.com/advisories/30416
  2. http://secunia.com/advisories/30789
  3. http://secunia.com/secunia_research/2008-24/advisory/
  4. http://securityreason.com/securityalert/3956
  5. http://securitytracker.com/id?1020340
  6. http://www.securityfocus.com/archive/1/493505/100/0/threaded
  7. http://www.securityfocus.com/bid/29851
  8. http://www.vupen.com/english/advisories/2008/1896
  9. http://www.vupen.com/english/advisories/2008/1897
  10. https://www.exploit-db.com/exploits/5951
  11. http://secunia.com/advisories/30416
  12. http://secunia.com/advisories/30789
  13. http://secunia.com/secunia_research/2008-24/advisory/
  14. http://securityreason.com/securityalert/3956
  15. http://securitytracker.com/id?1020340
  16. http://www.securityfocus.com/archive/1/493505/100/0/threaded
  17. http://www.securityfocus.com/bid/29851
  18. http://www.vupen.com/english/advisories/2008/1896
  19. http://www.vupen.com/english/advisories/2008/1897
  20. https://www.exploit-db.com/exploits/5951