CVE-2008-3429 Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.
MediumCVSS 6.8
EPSS 3.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| httrack | = 0.23-beta-2 | No fix listed |
| httrack | = 0.24-beta-2 | No fix listed |
| httrack | = 0.25-beta-2 | No fix listed |
| httrack | = 0.99-beta-2 | No fix listed |
| httrack | = 0.996-beta-2 | No fix listed |
| httrack | = 0.997-beta-2 | No fix listed |
| httrack | = 0.998-beta-2 | No fix listed |
| httrack | = 1.00 | No fix listed |
| httrack | = 1.01 | No fix listed |
| httrack | = 1.02 | No fix listed |
| httrack | = 1.03 | No fix listed |
| httrack | = 1.04 | No fix listed |
| httrack | = 1.10 | No fix listed |
| httrack | = 1.10-b | No fix listed |
| httrack | = 1.10-c | No fix listed |
| httrack | = 1.10-d | No fix listed |
| httrack | = 1.10-e | No fix listed |
| httrack | = 1.11 | No fix listed |
| httrack | = 1.15 | No fix listed |
| httrack | = 1.15-b | No fix listed |
| httrack | = 1.16 | No fix listed |
| httrack | = 1.16-b | No fix listed |
| httrack | = 1.20 | No fix listed |
| httrack | = 1.21 | No fix listed |
| httrack | = 1.22 | No fix listed |
Show 99 more
| Product | Affected versions | Fixed in |
|---|---|---|
| httrack | = 1.23 | No fix listed |
| httrack | = 1.24 | No fix listed |
| httrack | = 1.30 | No fix listed |
| httrack | = 2.00 | No fix listed |
| httrack | = 2.01 | No fix listed |
| httrack | = 2.2 | No fix listed |
| httrack | = 2.02 | No fix listed |
| httrack | = 3.00 | No fix listed |
| httrack | = 3.01 | No fix listed |
| httrack | = 3.02 | No fix listed |
| httrack | = 3.03 | No fix listed |
| httrack | = 3.04 | No fix listed |
| httrack | = 3.05 | No fix listed |
| httrack | = 3.06 | No fix listed |
| httrack | = 3.07 | No fix listed |
| httrack | = 3.08 | No fix listed |
| httrack | = 3.09 | No fix listed |
| httrack | = 3.10 | No fix listed |
| httrack | = 3.15 | No fix listed |
| httrack | = 3.16-2 | No fix listed |
| httrack | = 3.20-2 | No fix listed |
| httrack | = 3.21-8 | No fix listed |
| httrack | = 3.22-3 | No fix listed |
| httrack | = 3.23 | No fix listed |
| httrack | = 3.30 | No fix listed |
| httrack | = 3.31 | No fix listed |
| httrack | = 3.32 | No fix listed |
| httrack | = 3.33 | No fix listed |
| httrack | = 3.40 | No fix listed |
| httrack | = 3.40-2 | No fix listed |
| httrack | = 3.41 | No fix listed |
| httrack | = 3.41-2 | No fix listed |
| httrack | = 3.41-3 | No fix listed |
| httrack | = 3.42 | No fix listed |
| httrack | = 3.42-2 | No fix listed |
| httrack | = 3.42-3 | No fix listed |
| httrack winhttrack | <= 3.42 | No fix listed |
| httrack winhttrack | = 0.23-beta-2 | No fix listed |
| httrack winhttrack | = 0.24-beta-2 | No fix listed |
| httrack winhttrack | = 0.25-beta-2 | No fix listed |
| httrack winhttrack | = 0.99-beta-2 | No fix listed |
| httrack winhttrack | = 0.996-beta-2 | No fix listed |
| httrack winhttrack | = 0.997-beta-2 | No fix listed |
| httrack winhttrack | = 0.998-beta-2 | No fix listed |
| httrack winhttrack | = 1.00 | No fix listed |
| httrack winhttrack | = 1.01 | No fix listed |
| httrack winhttrack | = 1.02 | No fix listed |
| httrack winhttrack | = 1.03 | No fix listed |
| httrack winhttrack | = 1.04 | No fix listed |
| httrack winhttrack | = 1.10 | No fix listed |
| httrack winhttrack | = 1.10-b | No fix listed |
| httrack winhttrack | = 1.10-c | No fix listed |
| httrack winhttrack | = 1.10-d | No fix listed |
| httrack winhttrack | = 1.10-e | No fix listed |
| httrack winhttrack | = 1.11 | No fix listed |
| httrack winhttrack | = 1.15 | No fix listed |
| httrack winhttrack | = 1.16 | No fix listed |
| httrack winhttrack | = 1.16-b | No fix listed |
| httrack winhttrack | = 1.20 | No fix listed |
| httrack winhttrack | = 1.21 | No fix listed |
| httrack winhttrack | = 1.22 | No fix listed |
| httrack winhttrack | = 1.23 | No fix listed |
| httrack winhttrack | = 1.24 | No fix listed |
| httrack winhttrack | = 1.30 | No fix listed |
| httrack winhttrack | = 2.00 | No fix listed |
| httrack winhttrack | = 2.01 | No fix listed |
| httrack winhttrack | = 2.02 | No fix listed |
| httrack winhttrack | = 2.2 | No fix listed |
| httrack winhttrack | = 3.00 | No fix listed |
| httrack winhttrack | = 3.01 | No fix listed |
| httrack winhttrack | = 3.02 | No fix listed |
| httrack winhttrack | = 3.03 | No fix listed |
| httrack winhttrack | = 3.04 | No fix listed |
| httrack winhttrack | = 3.05 | No fix listed |
| httrack winhttrack | = 3.06 | No fix listed |
| httrack winhttrack | = 3.07 | No fix listed |
| httrack winhttrack | = 3.08 | No fix listed |
| httrack winhttrack | = 3.09 | No fix listed |
| httrack winhttrack | = 3.10 | No fix listed |
| httrack winhttrack | = 3.15 | No fix listed |
| httrack winhttrack | = 3.15-b | No fix listed |
| httrack winhttrack | = 3.16-2 | No fix listed |
| httrack winhttrack | = 3.20-2 | No fix listed |
| httrack winhttrack | = 3.21-8 | No fix listed |
| httrack winhttrack | = 3.22-3 | No fix listed |
| httrack winhttrack | = 3.23 | No fix listed |
| httrack winhttrack | = 3.30 | No fix listed |
| httrack winhttrack | = 3.31 | No fix listed |
| httrack winhttrack | = 3.32 | No fix listed |
| httrack winhttrack | = 3.33 | No fix listed |
| httrack winhttrack | = 3.40 | No fix listed |
| httrack winhttrack | = 3.40-2 | No fix listed |
| httrack winhttrack | = 3.41 | No fix listed |
| httrack winhttrack | = 3.41-2 | No fix listed |
| httrack winhttrack | = 3.41-3 | No fix listed |
| httrack winhttrack | = 3.42 | No fix listed |
| debian/httrack(Debian:12) | < 3.42.3-1 | 3.42.3-1 |
| debian/httrack(Debian:13) | < 3.42.3-1 | 3.42.3-1 |
| debian/httrack(Debian:14) | < 3.42.3-1 | 3.42.3-1 |
References
- 31323 third-party-advisory
- 31380 third-party-advisory
- 31866 third-party-advisory
- DSA-1626 vendor-advisory
- www.httrack.com
- 30425 vdb-entry
- www.venustech.com.cn
- ADV-2008-2221 vdb-entry
- httrack-urls-bo(44167) vdb-entry
- FEDORA-2008-7862 vendor-advisory
- FEDORA-2008-7896 vendor-advisory
- Debian Security Tracker CVE-2008-3429 vendor-advisory