CVE-2009-3617

2009-10-2000:00:00

ubuntu.com

7.6 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:N/C:C/I:C/A:C

0.042 Low

EPSS

Percentile

92.3%

JSON

Format string vulnerability in the AbstractCommand::onAbort function in
src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled,
allows remote attackers to execute arbitrary code or cause a denial of
service (application crash) via format string specifiers in a download URI.
NOTE: some of these details are obtained from third party information.