HTTrack Long URL Processing Buffer Overflow Vulnerability


Description   A vulnerability has been identified in HTTrack and WinHTTrack, which could be exploited by attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a buffer overflow error when processing an overly long URL (e.g. passed to the "Web Addresses (URL)" field), which could be exploited by attackers to crash an affected application or execute arbitrary code by tricking a user into crawling a malicious URL.
     
Vulnerable Products   Vulnerable Software:
HTTrack version 3.42-2 and priorWinHTTrack version 3.42-2 and prior
     
Solution   Upgrade to version 3.42-3 : http://www.httrack.com/page/2/en/index.html
     
CVE   CVE-2008-3429
     
References   http://www.httrack.com/history.txt
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Possible buffer overflow on URL
3.2.0
     


 
 
 
 
 Risk level 
Moderate 

 Vulnerability First Public Report Date 
2008-07-29 

 Target Type 
Client 

 Possible exploit 
Local & Remote