|Main Archive Page > Month Archives > full-disclosure-uk archives|
NOTE: Other versions may also be affected.
Rating: Moderately critical
Impact: System access
"OpenSG is a portable scenegraph system to create realtime graphics programs, e.g. for virtual reality applications".
Secunia Research has discovered a vulnerability in OpenSG, which can be exploited by malicious people to compromise an application using the library.
The vulnerability is caused due to a boundary error within the "HDRImageFileType::checkHDR()" function in Source/System/Image/ OSGHDRImageFileType.cpp, which can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into opening a specially crafted Radiance RGBE (*.hdr) file.
Successful exploitation allows execution of arbitrary code.
Fixed in the CVS repository.
Discovered by Stefan Cornelius, Secunia Research.
The Common Vulnerabilities and Exposures (CVE) project has not yet assigned a CVE for the vulnerability.
Secunia offers vulnerability management solutions to corporate customers with verified and reliable vulnerability intelligence relevant to their specific system configuration:
Secunia also provides a publicly accessible and comprehensive advisory database as a service to the security community and private individuals, who are interested in or concerned about IT-security.
Secunia believes that it is important to support the community and to do active vulnerability research in order to aid improving the security and reliability of software in general:
Secunia regularly hires new skilled team members. Check the URL below to see currently vacant positions:
Secunia offers a FREE mailing list called Secunia Security Advisories:
Please verify this advisory by visiting the Secunia website: http://secunia.com/secunia_research/2008-60/
Complete list of vulnerability reports published by Secunia Research: http://secunia.com/secunia_research/