Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

qtpfsgui: arbitrary code execution

Package(s):

qtpfsgui

CVE #(s):

CVE-2007-2956

Created:

August 13, 2007

Updated:

August 15, 2007

Description:

There is a boundary error in Qtpfsgui and pfstools when reading the header of a Radiance RGBE (*.hdr) file within the "readRadianceHeader()" function in src/fileformat/rgbeio.cpp (Qtpfsgui) or src/Fileformat/rgbeio.cpp (pfstools) which can lead to arbitrary code execution.

Alerts:

Fedora

FEDORA-2007-1581

2007-08-13

(Log in to post comments)