CyberSec.Space Logo
Back to CVE Browser

CVE-2008-3024

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.0100%
EPSS Percentile22.39th
PublishedJul 7, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.

Affected Platforms (CPE)

📦
Blackberry

Qnx Momentics

<= 6.3.2

References & Advisories

🔗 http://secunia.com/advisories/30808
🔗 http://securityreason.com/securityalert/3974
🔗 http://www.scanit.net/rd/advisories/adv01
🔗 http://www.securityfocus.com/archive/1/493816/100/0/threaded
🔗 http://www.securityfocus.com/bid/30024
🔗 http://www.securitytracker.com/id?1020411
🔗 http://www.vupen.com/english/advisories/2008/1996/references
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/43542

Related Vulnerabilities

CVE-2021-320258.1

An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform versi...

CVE-2013-26877.8

Stack-based buffer overflow in the bpe_decompress function in (1) BlackBerry QNX Neutrino RTOS through 6.5.0 SP1 and (2) QNX Momen...

CVE-2008-540310.0

Heap-based buffer overflow in the XML parser in the AIM plugin in Trillian before 3.1.12.0 allows remote attackers to execute arbi...

CVE-2008-501710.0

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, ...