CVE-2008-2427: Pagesperso-Orange Gfl SDK

High severity, CVSS 9.3. EPSS: 16.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file.

Affected products

• Pagesperso-Orange Gfl SDK: version 2.82 only
• Pagesperso-Orange Nconvert: version 4.92 only
• Pagesperso-Orange Xnview: version 1.93.6 only; version 1.70 only

Published 2008-06-24. Last modified 2026-06-16.