CVE-2008-5262

EPSS 1.5%

devil - buffer overflow

Published: 1/13/2009Modified: 3/9/2026

Also known as:DSA-1717-1DEBIAN-CVE-2008-5262

Description

Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file.

Affected packages (3)

Debian/devilfrom 0, < 1.7.5-4
Debian/devilfrom 0, < 1.6.7-5+etch1
Debian/devilfrom 0, < 1.6.8-rc2-3+lenny1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-5262