Unscored severity · published Jul 7, 2008
CVE-2008-3024
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/
–
CVSS
5.9%
EPSS
No
On KEV
Description
Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.9% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QM
Qnx Momentics · Blackberry
through 6.3.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-3024
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-3024
Third Party Advisory
http://secunia.com/advisories/30808
Exploit
http://securityreason.com/securityalert/3974
Broken Link
http://www.scanit.net/rd/advisories/adv01
Exploit
http://www.securityfocus.com/archive/1/493816/100/0/threaded
Exploit
http://www.securityfocus.com/bid/30024
Third Party Advisory
http://www.securitytracker.com/id?1020411
More from Qnx Momentics
7.8
CVE-2021-32025
An elevation of privilege vulnerability in the QNX Neutrino Kernel of affected versions of QNX Software Development Platform version(s) 6.4.0 to 7.0, QNX Momentics all 6.3.x…