cve/2008/CVE-2008-2427.md

CVE-2008-2427

Description

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file.

POC

Reference

• http://securityreason.com/securityalert/3956
• https://www.exploit-db.com/exploits/5951

Github

No PoCs found on GitHub currently.