CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-3617

Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.14

EPSS Ranking 94.0%

CVSS Severity

CVSS v2 Score 7.6

References

Products affected by CVE-2009-3617

Tatsuhiro Tsujikawa » Aria2 » Version: Any

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:*
Tatsuhiro Tsujikawa » Aria2 » Version: 0.11.3

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.3
Tatsuhiro Tsujikawa » Aria2 » Version: 0.11.4

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.4
Tatsuhiro Tsujikawa » Aria2 » Version: 0.11.5

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.11.5
Tatsuhiro Tsujikawa » Aria2 » Version: 0.12.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.12.0
Tatsuhiro Tsujikawa » Aria2 » Version: 0.12.1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.12.1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.13.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.0
Tatsuhiro Tsujikawa » Aria2 » Version: 0.13.0+1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.0+1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.13.1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.13.1+1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.1+1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.13.2

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.2
Tatsuhiro Tsujikawa » Aria2 » Version: 0.13.2+1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.13.2+1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.14.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.14.0
Tatsuhiro Tsujikawa » Aria2 » Version: 0.14.0+1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.14.0+1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.15.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.0
Tatsuhiro Tsujikawa » Aria2 » Version: 0.15.1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.15.1+1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1+1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.15.1+2

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.1+2
Tatsuhiro Tsujikawa » Aria2 » Version: 0.15.2

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.2
Tatsuhiro Tsujikawa » Aria2 » Version: 0.15.3

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.15.3
Tatsuhiro Tsujikawa » Aria2 » Version: 0.16.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.0
Tatsuhiro Tsujikawa » Aria2 » Version: 0.16.1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.1
Tatsuhiro Tsujikawa » Aria2 » Version: 0.16.2

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:0.16.2
Tatsuhiro Tsujikawa » Aria2 » Version: 1.0.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.0.0
Tatsuhiro Tsujikawa » Aria2 » Version: 1.1.1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.1.1
Tatsuhiro Tsujikawa » Aria2 » Version: 1.1.2

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.1.2
Tatsuhiro Tsujikawa » Aria2 » Version: 1.2.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.2.0
Tatsuhiro Tsujikawa » Aria2 » Version: 1.3.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.0
Tatsuhiro Tsujikawa » Aria2 » Version: 1.3.1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.1
Tatsuhiro Tsujikawa » Aria2 » Version: 1.3.2

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.2
Tatsuhiro Tsujikawa » Aria2 » Version: 1.3.3

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.3.3
Tatsuhiro Tsujikawa » Aria2 » Version: 1.4.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.4.0
Tatsuhiro Tsujikawa » Aria2 » Version: 1.4.1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.4.1
Tatsuhiro Tsujikawa » Aria2 » Version: 1.5.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.0
Tatsuhiro Tsujikawa » Aria2 » Version: 1.5.1

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.1
Tatsuhiro Tsujikawa » Aria2 » Version: 1.5.2

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.5.2
Tatsuhiro Tsujikawa » Aria2 » Version: 1.6.0

cpe:2.3:a:tatsuhiro_tsujikawa:aria2:1.6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2009-3617

Products

Pricing

Contact Us