CVE-2008-3360

EPSS 7.8%

Stack-based buffer overflow in the HTML parser in IntelliTamper 2.0.7 allows remote attackers to execute arbitrary code via a long URL in the HREF attribute of an A element, a different vulnerability than CVE-2006-2494.

Affected products

n/a · n/a

public PoCs found — 4

cve_referencewww.exploit-db.com/exploits/6103unverified cve_referencewww.exploit-db.com/exploits/6116unverified cve_referencewww.exploit-db.com/exploits/6121unverified cve_referencewww.exploit-db.com/exploits/6238unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/4058 https://exchange.xforce.ibmcloud.com/vulnerabilities/43876 https://www.exploit-db.com/exploits/6103 https://www.exploit-db.com/exploits/6116 https://www.exploit-db.com/exploits/6121 https://www.exploit-db.com/exploits/6238 http://www.securityfocus.com/bid/30317 http://www.securitytracker.com/id?1020521 http://www.vupen.com/english/advisories/2008/2120/references