NetSight
IP …
critical9.3Public exploit code

CVE-2008-3024

Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.

Affected products

VendorProductAffected versions
BlackberryQnx Momentics
through 6.3.2

Weakness classification

CWE-787

References