Multiple buffer overflows in NASA Common Data Format (CDF) allow context-dependent attackers to execute arbitrary code as demonstrated using (1) an array index error in the ReadAEDRList64 function and other errors in the (2) SearchForRecord_r_64 (3) LastRecord64 (4) CDFsel64 and other unspecified functions.