CVE-2007-2956

MEDIUM 6.8CVE-2007-2956 · Published 13/08/2007 · updated 16/06/2026

In short

CVE-2007-2956 is a MEDIUM (CVSS 6.8) vulnerability affecting pfstools (pfstools), qtpfsgui (qtpfsgui).
Chance of exploitation in the next 30 days (EPSS): 3.9%, higher than 90.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
pfstools pfstools	`= 1.6.2`	No fix yet
qtpfsgui qtpfsgui	`= 1.8.11`	No fix yet

Description

Stack-based buffer overflow in the readRadianceHeader function in (1) src/fileformat/rgbeio.cpp in pfstools 1.6.2 and (2) src/Fileformat/rgbeio.cpp in Qtpfsgui 1.8.11 allows remote attackers to execute arbitrary code via a crafted Radiance RGBE (.hdr) file.

References

pfstools.cvs.sourceforge.net/pfstools/pfstools/src/fileformat/rgbeio.cpp
pfstools.cvs.sourceforge.net/pfstools/pfstools/src/fileformat/rgbeio.cpp
secunia.com/advisories/26387 · Vendor Advisory
secunia.com/advisories/26388 · Vendor Advisory
secunia.com/advisories/26674
secunia.com/secunia_research/2007-67/advisory · Vendor Advisory
secunia.com/secunia_research/2007-68/advisory · Vendor Advisory
umn.dl.sourceforge.net/sourceforge/qtpfsgui/qtpfsgui-1.8.12.tar.gz · Patch
novell.com/linux/security/advisories/2007_18_sr.html
vupen.com/english/advisories/2007/2855
vupen.com/english/advisories/2007/2856
exchange.xforce.ibmcloud.com/vulnerabilities/35948

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free