CVE:CVE-2008-0064
CNNVD:CNNVD-200801-470
GFL SDK是XnView等程序所使用的函数库，用于提供图形格式支持。
GFL SDK库在读取Radiance RGBE(*.hdr)文件时存在栈溢出漏洞，如果用户受骗查看了特制的Radiance RGBE文件的话，就可能触发这个溢出，导致执行任意指令。
solution:Upgrade pierreegougelet gfl_sdk to a higher version than 2.870,and avoid the version 2.870; Upgrade pierreegougelet nconvert to a higher version than 4.85,and avoid the version (,4.85]; Upgrade pierreegougelet xnview to a higher version than 1.91,1.92,and avoid the version (,1.91],(,1.92]