Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2009-10-20T17:00:00

Updated: 2024-08-07T06:31:11.030Z

Reserved: 2009-10-09T00:00:00

Link: CVE-2009-3617

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2009-10-20T17:30:01.000

Modified: 2024-11-21T01:07:48.903

Link: CVE-2009-3617

cve-icon Redhat

Severity : Low

Publid Date: 2009-10-09T00:00:00Z

Links: CVE-2009-3617 - Bugzilla