製品・ソフトウェアに関する情報
Vulnerability Search
Httrack と WinHTTrack の URI 処理におけるバッファオーバーフローの脆弱性
Title Httrack と WinHTTrack の URI 処理におけるバッファオーバーフローの脆弱性
Summary

Httrack と WinHTTrack の URI 処理には、バッファオーバーフローの脆弱性が存在します。

Possible impacts 第三者により、過度に長い URL を介して、サービス運用妨害 (クラッシュ) 状態にされる、および任意のコードを実行される可能性があります。
Solution

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date July 31, 2008, midnight
Registration Date Sept. 25, 2012, 5:17 p.m.
Last Update Sept. 25, 2012, 5:17 p.m.
CVSS2.0 : 警告
Score 6.8
Vector AV:N/AC:M/Au:N/C:P/I:P/A:P
Affected System
HTTrack
HTTrack 
winhttrack 3.42-3 未満
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
Change Log
No Changed Details Date of change
0 [2012年09月25日]
  掲載		 Feb. 17, 2018, 10:37 a.m.
NVD Vulnerability Information
CVE-2008-3429
Summary

Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.

Publication Date Aug. 1, 2008, 7:41 a.m.
Registration Date Jan. 29, 2021, 1:40 p.m.
Last Update Aug. 8, 2017, 10:31 a.m.
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:httrack:httrack:0.23:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.24:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.25:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.99:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.996:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.997:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.998:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.03:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.04:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:b:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:c:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:d:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:e:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.11:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.15:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.15:b:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.16:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.16:b:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.20:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.21:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.22:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.23:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.24:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.30:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:2.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:2.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:2.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:2.2:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.03:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.04:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.05:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.06:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.07:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.08:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.09:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.10:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.15:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.16:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.20:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.21:8:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.22:3:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.23:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.30:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.31:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.32:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.33:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.40:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.40:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.41:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.41:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.41:3:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.42:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.42:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.42:3:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.23:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.24:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.25:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.99:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.996:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.997:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.998:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.03:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.04:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:b:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:c:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:d:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:e:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.11:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.15:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.16:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.16:b:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.20:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.21:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.22:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.23:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.24:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.30:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:2.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:2.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:2.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:2.2:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.03:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.04:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.05:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.06:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.07:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.08:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.09:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.10:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.15:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.15:b:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.16:2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.20:2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.21:8:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.22:3:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.23:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.30:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.31:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.32:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.33:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.40:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.40:2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.41:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.41:2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.41:3:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.42:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:*:2:*:*:*:*:*:* 3.42
Related information, measures and tools
Common Vulnerabilities List