Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information.
References
Configurations
Configuration 1 (hide)
|
History
07 Nov 2023, 02:04
Type | Values Removed | Values Added |
---|---|---|
Summary | Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information. |
Information
Published : 2009-10-20 17:30
Updated : 2024-02-28 11:21
NVD link : CVE-2009-3617
Mitre link : CVE-2009-3617
CVE.ORG link : CVE-2009-3617
JSON object : View
Products Affected
tatsuhiro_tsujikawa
- aria2
CWE
CWE-134
Use of Externally-Controlled Format String