6.8
CVSSv2

CVE-2008-2542

Published: 05/06/2008 Updated: 11/10/2018
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 685
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote malicious users to execute arbitrary code via a crafted PNM file.

Vulnerable Product Search on Vulmon Subscribe to Product

nasa ames research center bigview 1.8

Exploits

source: wwwsecurityfocuscom/bid/29517/info NASA Ames Research Center BigView is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer An attacker can exploit this issue to execute arbitrary code in the context of ...
Core Security Technologies Advisory - The NASA BigView package suffers from a stack buffer overflow when parsing specially crafted (invalid) PNM input files If successful, a malicious third party could trigger execution of arbitrary code within the context of the application, or otherwise crash the whole application ...