The vulnerability of the fd_read_body() function in the Wget software for downloading files over the network allows a attacker to execute arbitrary code.

The vulnerability of the fdreadbody function in the Wget network-files downloading software is related to insufficient input validation, which leads to buffer overflows. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

GNU Wget fd_read_body Heap Buffer Overflow (CVE-2017-13090)

A heap buffer overflow vulnerability exists in Wget. The vulnerability is due to improper handling of HTTP responses with chunked transfer encoding within the fdreadbody function. A remote, unauthenticated attacker could exploit this vulnerability by enticing a user to make an HTTP request to the...

CVE-2017-13090

The retr.c:fdreadbody function is called when processing OK responses. When the response is sent chunked in wget before 1.19.2, the chunk parser uses strtol to read each chunk's length, but doesn't check that the chunk length is a non-negative number. The code then tries to read the chunk in piec...