CVE-2008-0064

Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.

• CWE-119

• http://secunia.com/advisories/28326Patch, Vendor Advisory
• http://secunia.com/advisories/28710Vendor Advisory
• http://secunia.com/secunia_research/2008-1/advisoryVendor Advisory
• http://www.securityfocus.com/bid/27514
• http://www.vupen.com/english/advisories/2008/0328
• http://www.vupen.com/english/advisories/2008/0329
• http://secunia.com/advisories/28326Patch, Vendor Advisory
• http://secunia.com/advisories/28710Vendor Advisory
• http://secunia.com/secunia_research/2008-1/advisoryVendor Advisory
• http://www.securityfocus.com/bid/27514
• http://www.vupen.com/english/advisories/2008/0328
• http://www.vupen.com/english/advisories/2008/0329

Published

Jan 31, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-0058Race condition in the NSURLConnection cache management funct…
• CVE-2008-0059Race condition in NSXML in Foundation for Apple Mac OS X 10.…
• CVE-2008-0060Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remo…
• CVE-2008-0061MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 bef…
• CVE-2008-0062KDC in MIT Kerberos 5 (krb5kdc) does not set a global variab…9.8
• CVE-2008-0063The Kerberos 4 support in KDC in MIT Kerberos 5 (krb5kdc) do…7.5
• CVE-2008-0065Multiple stack-based buffer overflows in in_mp3.dll in Winam…
• CVE-2008-0066Multiple buffer overflows in htmsr.dll in the HTML speed rea…
• CVE-2008-0067Multiple stack-based buffer overflows in HP OpenView Network…
• CVE-2008-0068Directory traversal vulnerability in OpenView5.exe in HP Ope…
• CVE-2008-0069Stack-based buffer overflow in XnView 1.92 and 1.92.1 allows…
• CVE-2008-0070Integer overflow in Orb Networks Orb 2.00.1014 and Winamp Re…