ksquirrel-libs 'RGBE' File Parsing Multiple Stack Buffer Overflow Vulnerabilities

Bugtraq ID:	33902
Class:	Boundary Condition Error
CVE:	CVE-2008-5263
Remote:	Yes
Local:	No
Published:	Feb 25 2009 12:00AM
Updated:	Feb 25 2009 08:57PM
Credit:	Stefan Cornelius
Vulnerable:	Baryshev Dmitry ksquirrel-libs 0.8 Baryshev Dmitry KSquirrel 0.8
Not Vulnerable:

ksquirrel-libs 'RGBE' File Parsing Multiple Stack Buffer Overflow Vulnerabilities

The 'ksquirrel-libs' library is prone to multiple stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage these issues to execute arbitrary code in the context of an application using the library. Failed attacks will cause denial-of-service conditions.

These issues affect ksquirrel-libs 0.8.0; other versions may also be affected.

ksquirrel-libs 'RGBE' File Parsing Multiple Stack Buffer Overflow Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ksquirrel-libs 'RGBE' File Parsing Multiple Stack Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

ksquirrel-libs 'RGBE' File Parsing Multiple Stack Buffer Overflow Vulnerabilities

References:

• KSquirrel Homepage (Baryshev Dmitry)
  
• Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows (Secunia Research)
  
• Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows (Secunia Research )