CVE-2008-2080

2008-05-0615:20:00

CWE-119

mitre

web.nvd.nist.gov

cve-2008-2080

buffer overflow

read32s_64

nasa

cdf library

arbitrary code execution

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.017

Percentile

87.8%

JSON

Stack-based buffer overflow in the Read32s_64 function in src/lib/cdfread64.c in the NASA Goddard Space Flight Center Common Data Format (CDF) library before 3.2.1 allows context-dependent attackers to execute arbitrary code via a .cdf file with crafted length tags.

Affected configurations

Nvd

Node

nasa_goddard_space_flight_centercommon_data_formatRange≤3.2

nasa_goddard_space_flight_centercommon_data_formatMatch2.0

nasa_goddard_space_flight_centercommon_data_formatMatch2.1

nasa_goddard_space_flight_centercommon_data_formatMatch2.2

nasa_goddard_space_flight_centercommon_data_formatMatch2.3

nasa_goddard_space_flight_centercommon_data_formatMatch2.4

nasa_goddard_space_flight_centercommon_data_formatMatch2.5

nasa_goddard_space_flight_centercommon_data_formatMatch2.6

nasa_goddard_space_flight_centercommon_data_formatMatch2.7

nasa_goddard_space_flight_centercommon_data_formatMatch3.0

nasa_goddard_space_flight_centercommon_data_formatMatch3.1

VendorProductVersionCPE
nasa_goddard_space_flight_centercommon_data_format*cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:*:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format2.0cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.0:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format2.1cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.1:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format2.2cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.2:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format2.3cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.3:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format2.4cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.4:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format2.5cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.5:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format2.6cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.6:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format2.7cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.7:*:*:*:*:*:*:*
nasa_goddard_space_flight_centercommon_data_format3.0cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:3.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
nasa_goddard_space_flight_center	common_data_format	*	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format::::::::
nasa_goddard_space_flight_center	common_data_format	2.0	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.0:::::::*
nasa_goddard_space_flight_center	common_data_format	2.1	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.1:::::::*
nasa_goddard_space_flight_center	common_data_format	2.2	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.2:::::::*
nasa_goddard_space_flight_center	common_data_format	2.3	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.3:::::::*
nasa_goddard_space_flight_center	common_data_format	2.4	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.4:::::::*
nasa_goddard_space_flight_center	common_data_format	2.5	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.5:::::::*
nasa_goddard_space_flight_center	common_data_format	2.6	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.6:::::::*
nasa_goddard_space_flight_center	common_data_format	2.7	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:2.7:::::::*
nasa_goddard_space_flight_center	common_data_format	3.0	cpe:2.3:a:nasa_goddard_space_flight_center:common_data_format:3.0:::::::*