CVE-2008-0064

Severity: critical (CVSS 9.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-31 · updated 2026-06-16
Weakness: CWE-119

Description

Stack-based buffer overflow in Pierre-emmanuel Gougelet (1) XnView 1.91 and 1.92, (2) NConvert 4.85, and (3) libgfl280.dll in GFL SDK 2.870 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.

Affected products

Pierreegougelet Gfl Sdk: 2.870
Pierreegougelet Nconvert: through 4.85
Pierreegougelet Xnview: through 1.91; through 1.92

References

http://secunia.com/advisories/28326
http://secunia.com/advisories/28710
http://secunia.com/secunia_research/2008-1/advisory
http://www.securityfocus.com/bid/27514
http://www.vupen.com/english/advisories/2008/0328
http://www.vupen.com/english/advisories/2008/0329
http://secunia.com/advisories/28326
http://secunia.com/advisories/28710
http://secunia.com/secunia_research/2008-1/advisory
http://www.securityfocus.com/bid/27514
http://www.vupen.com/english/advisories/2008/0328
http://www.vupen.com/english/advisories/2008/0329

Get alerted when CVE-2008-0064 or the next vulnerability affects your stack