CVE-2009-3711

Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

63.91% chance of exploitation in the next 30 days, 99th percentile

Published

2009-10-16

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/httpdx_handlepeer.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16799
• https://www.exploit-db.com/exploits/10053

References

• CVE Record
• NVD entry

Related

• CVE-2009-3710
• CVE-2009-3712
• CVE-2009-3709
• CVE-2009-3713
• CVE-2009-3708
• CVE-2009-3714