CVE-2009-3617
EPSS 14.0%發布日:2009/10/20修改日:2026/4/28
描述
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information.
受影響套件(1)
- Debian/aria2from 0, < 1.6.2-1