NetSight
high7.5

CVE-2008-2080

Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3…

Impact

Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.

Affected products

VendorProductAffected versions
Nasa Goddard Space Flight CenterCommon Data Format
through 3.2
Versions 2.0, 2.1, 2.2, 2.3, 2.4

Weakness classification

References