VULNERABILITY INTELLIGENCE
CVE-2007-2956
CVSS score6.8 MEDIUM
EPSS probability3.88%
CISA KEVNot currently listed
Published2007-08-13
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Stack-based buffer overflow in the readRadianceHeader function in (1) src/fileformat/rgbeio.cpp in pfstools 1.6.2 and (2) src/Fileformat/rgbeio.cpp in Qtpfsgui 1.8.11 allows remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.
Primary references
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com — Vendor Advisory
- PSIRT-CNA@flexerasoftware.com — Vendor Advisory
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com — Vendor Advisory
- PSIRT-CNA@flexerasoftware.com — Vendor Advisory
- PSIRT-CNA@flexerasoftware.com — Patch
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com
- PSIRT-CNA@flexerasoftware.com