Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-2080

EPSS 1.21% · P79
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-2080

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
NASA CDF库src/lib/cdfread64.c文件栈溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
通用数据格式(CDF)是由NASA戈达德航天飞行中心开发的用于存储和操控标量和多维数据的数据格式。 CDF库在打开无效的CDF输入文件时存在栈溢出漏洞，允许攻击者在使用该库的应用程序环境中执行任意指令或导致整个应用程序崩溃。 漏洞存在于src/lib/cdfread64.c文件的以下代码中。Read32s_64函数将数据从文件读取到缓冲区，temp缓冲区大小为MAX_READ32s，但没有检查count参数，因此大于MAX_READ32s的参数可能会触发栈溢出。 /----------- 57 STATI
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-2080

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-2080

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-05-06 · 11 CVEs total

CVE-2008-2091KubeLabs Kubelance 'ipn.php' 本地文件包含漏洞
CVE-2008-2092Linksys SPA-2102 Phone Adapter Packet Handling 拒绝服务漏洞
CVE-2008-2093Joomla! and Mambo Community Builder 'com_profiler' Component 'index.php' SQL注入漏洞
CVE-2008-2094XOOPS Article Module 'article.php' SQL注入漏洞
CVE-2008-2095Joomla! FlippingBook Component 'book_id' 参数SQL注入漏洞
CVE-2008-2005WonderWare SuiteLink slssvc.exe远程拒绝服务漏洞
CVE-2008-2087Softbiz Web Host Directory Script 'search_result.php' SQL注入漏洞
CVE-2008-2088PHP Forge 'id' Parameter SQL注入漏洞
CVE-2008-2089Sun Solaris 10 未明SCTP协议处理远程拒绝服务漏洞
CVE-2008-2090Sun Solaris SCTP Network Flooding 远程拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-2080

No comments yet

Leave a comment