製品・ソフトウェアに関する情報
脆弱性検索
Httrack と WinHTTrack の URI 処理におけるバッファオーバーフローの脆弱性
タイトル Httrack と WinHTTrack の URI 処理におけるバッファオーバーフローの脆弱性
概要

Httrack と WinHTTrack の URI 処理には、バッファオーバーフローの脆弱性が存在します。

想定される影響 第三者により、過度に長い URL を介して、サービス運用妨害 (クラッシュ) 状態にされる、および任意のコードを実行される可能性があります。
対策

ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
公表日 2008年7月31日0:00
登録日 2012年9月25日17:17
最終更新日 2012年9月25日17:17
CVSS2.0 : 警告
スコア 6.8
ベクター AV:N/AC:M/Au:N/C:P/I:P/A:P
影響を受けるシステム
HTTrack
HTTrack 
winhttrack 3.42-3 未満
CVE (情報セキュリティ 共通脆弱性識別子)
CWE (共通脆弱性タイプ一覧)
ベンダー情報
変更履歴
No 変更内容 変更日
0 [2012年09月25日]
  掲載		 2018年2月17日10:37
NVD脆弱性情報
CVE-2008-3429
概要

Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.

公表日 2008年8月1日7:41
登録日 2021年1月29日13:40
最終更新日 2017年8月8日10:31
影響を受けるソフトウェアの構成
構成1 以上 以下 より上 未満
cpe:2.3:a:httrack:httrack:0.23:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.24:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.25:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.99:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.996:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.997:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:0.998:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.03:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.04:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:b:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:c:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:d:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.10:e:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.11:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.15:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.15:b:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.16:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.16:b:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.20:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.21:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.22:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.23:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.24:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:1.30:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:2.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:2.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:2.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:2.2:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.03:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.04:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.05:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.06:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.07:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.08:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.09:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.10:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.15:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.16:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.20:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.21:8:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.22:3:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.23:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.30:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.31:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.32:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.33:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.40:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.40:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.41:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.41:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.41:3:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.42:*:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.42:2:*:*:*:*:*:*
cpe:2.3:a:httrack:httrack:3.42:3:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.23:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.24:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.25:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.99:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.996:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.997:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:0.998:beta-2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.03:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.04:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:b:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:c:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:d:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.10:e:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.11:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.15:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.16:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.16:b:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.20:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.21:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.22:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.23:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.24:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:1.30:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:2.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:2.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:2.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:2.2:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.00:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.01:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.02:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.03:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.04:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.05:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.06:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.07:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.08:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.09:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.10:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.15:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.15:b:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.16:2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.20:2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.21:8:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.22:3:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.23:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.30:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.31:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.32:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.33:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.40:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.40:2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.41:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.41:2:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.41:3:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:3.42:*:*:*:*:*:*:*
cpe:2.3:a:httrack:winhttrack:*:2:*:*:*:*:*:* 3.42
関連情報、対策とツール
共通脆弱性一覧