| Name | CVE-2008-5262 |
| Description | Multiple stack-based buffer overflows in the iGetHdrHeader function in src-IL/src/il_hdr.c in DevIL 1.7.4 allow context-dependent attackers to execute arbitrary code via a crafted Radiance RGBE file. |
| Source | CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more) |
| References | DSA-1717-1, DTSA-184-1 |
| Debian Bugs | 511844, 512122 |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| devil (PTS) | bookworm, bullseye | 1.7.8-10 | fixed |
| sid, trixie | 1.7.8-12 | fixed |
The information below is based on the following data on fixed versions.
Notes
fix for 1.7.5-3 incomplete, see #512122