Unrated severityNVD Advisory· Published Jun 24, 2008· Updated Apr 23, 2026
CVE-2008-2427
CVE-2008-2427
Description
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file.
Affected products
4- cpe:2.3:a:pagesperso-orange:gfl_sdk:2.82:*:*:*:*:*:*:*
- cpe:2.3:a:pagesperso-orange:nconvert:4.92:*:*:*:*:*:*:*
cpe:2.3:a:pagesperso-orange:xnview:1.70:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:pagesperso-orange:xnview:1.70:*:*:*:*:*:*:*
- cpe:2.3:a:pagesperso-orange:xnview:1.93.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- secunia.com/advisories/30416nvdVendor Advisory
- secunia.com/advisories/30789nvdVendor Advisory
- secunia.com/secunia_research/2008-24/advisory/nvdVendor Advisory
- securityreason.com/securityalert/3956nvd
- securitytracker.com/idnvd
- www.securityfocus.com/archive/1/493505/100/0/threadednvd
- www.securityfocus.com/bid/29851nvd
- www.vupen.com/english/advisories/2008/1896nvd
- www.vupen.com/english/advisories/2008/1897nvd
- www.exploit-db.com/exploits/5951nvd
News mentions
0No linked articles in our index yet.