Description
Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-dependent attackers to execute arbitrary code via a crafted Targa file with a run-length-encoding (RLE) compression that produces more data than expected when decoding.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=52 ↗
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=562 ↗
- http://www.securitytracker.com/id?1018420 ↗
- http://www.securityfocus.com/bid/24963 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35492 ↗
- http://secunia.com/advisories/26131 ↗
- http://www.securityfocus.com/archive/1/474058/100/0/threaded ↗
- http://www.vupen.com/english/advisories/2007/2577 ↗