← back
CVE-2008-2427

CVE-2008-2427

EPSS 16.1%
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/5951unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/30416http://secunia.com/advisories/30789http://secunia.com/secunia_research/2008-24/advisory/http://securityreason.com/securityalert/3956http://securitytracker.com/id?1020340https://www.exploit-db.com/exploits/5951http://www.securityfocus.com/archive/1/493505/100/0/threadedhttp://www.securityfocus.com/bid/29851http://www.vupen.com/english/advisories/2008/1896http://www.vupen.com/english/advisories/2008/1897