CVE-2009-0246

Stack-based buffer overflow in easyHDR PRO 1.60.2 allows user-assisted attackers to execute arbitrary code via an invalid Radiance RGBE (aka .hdr) file.

• CWE-119

• http://easyhdr.com/version.phpVendor Advisory
• http://osvdb.org/51609
• http://secunia.com/advisories/33468Vendor Advisory
• http://secunia.com/secunia_research/2008-61/Vendor Advisory
• http://securityreason.com/securityalert/4941
• http://www.securityfocus.com/archive/1/500192/100/0/threaded
• http://www.securityfocus.com/bid/33363
• http://www.vupen.com/english/advisories/2009/0190
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48119
• http://easyhdr.com/version.phpVendor Advisory
• http://osvdb.org/51609
• http://secunia.com/advisories/33468Vendor Advisory
• http://secunia.com/secunia_research/2008-61/Vendor Advisory
• http://securityreason.com/securityalert/4941
• http://www.securityfocus.com/archive/1/500192/100/0/threaded
• http://www.securityfocus.com/bid/33363
• http://www.vupen.com/english/advisories/2009/0190
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48119

Published

Jan 22, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-0240listing.php in WebSVN 2.0 and possibly 1.7 beta, when using …
• CVE-2009-0241Stack-based buffer overflow in the process_path function in …
• CVE-2009-0242Rejected reason: gmetad in Ganglia 3.1.1, when supporting mu…
• CVE-2009-0243Microsoft Windows does not properly enforce the Autorun and …
• CVE-2009-0244Directory traversal vulnerability in the OBEX FTP Service in…8.8
• CVE-2009-0245Cross-site scripting (XSS) vulnerability in Usagi Project My…
• CVE-2009-0247The server for 53KF Web IM 2009 Home, Professional, and Ente…
• CVE-2009-0248Cross-site scripting (XSS) vulnerability in rankup.asp in Ka…
• CVE-2009-0249Katy Whitton RankEm stores sensitive information under the w…
• CVE-2009-0250Ryneezy phoSheezy 0.2 stores sensitive information under the…
• CVE-2009-0251Static code injection vulnerability in admin.php in Ryneezy …
• CVE-2009-0252Multiple SQL injection vulnerabilities in default.asp in Ent…