Secunia Research has discovered a vulnerability in pfstools, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the "readRadianceHeader()" function in src/fileformat/rgbeio.cpp, which can be exploited to cause a stack-based buffer overflow by e.g. tricking a user into opening a specially crafted Radiance RGBE (*.hdr) file.

The vulnerability is confirmed in version 1.6.2 and 1.6.3. Other versions may also be affected.

Solution
Update to version 1.6.4.

Provided and/or discovered by
Stefan Cornelius, Secunia Research

Changelog
Further details available in Customer Area

Original Advisory
http://secunia.com/secunia_research/2007-67/

Deep Links
Links available in Customer Area