CVE-2008-0100

Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via a long string in a .WRL file.

Link	Resource
http://aluigi.altervista.org/adv/whitedunboffs-adv.txt	Exploit
http://vrml.cip.ica.uni-stuttgart.de/dune/news.html
http://www.securityfocus.com/bid/27102	Patch
http://secunia.com/advisories/28287	Patch Vendor Advisory
http://securityreason.com/securityalert/3516
https://exchange.xforce.ibmcloud.com/vulnerabilities/39385
http://www.securityfocus.com/archive/1/485724/100/0/threaded

Configuration 1

cpe:2.3:a:white_dune:white_dune:*:*:*:*:*:*:*:*

---

Published : 2008-01-08 02:46

Updated : 2018-10-15 09:57

---

NVD link : CVE-2008-0100

Mitre link : CVE-2008-0100

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer