PoC Index

CVE-2008-2080

HIGH 7.5EPSS 3.9%

Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.

CVSS v2.0
7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS
3.87% chance of exploitation in the next 30 days, 89th percentile
Published
2008-05-06
Updated
2024-08-07

Proof-of-concept exploits (1)

References

Related