← Database

CVE-2008-2427

CRITICAL CVSS: 9.3 Published: 2008-06-24 Modified: 2026-06-16

Description

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file.

Affected Platforms

Pagesperso-Orange NconvertFreebsd FreebsdMicrosoft Windows NtPagesperso-Orange XnviewPagesperso-Orange Gfl SdkRedhat Linux

Weakness Type

CWE-119

References