CVE-2008-6897

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) "a" HTML tag; a long src attribute in (2) embed, (3) img, or (4) script tags; (5) a long background attribute in a body tag; and other unspecified tags.

Score
CVSS 2.0 9.3 Critical
Status
Modified - cve@mitre.org
Published
2009-08-05
Last modified
2024-08-07
Weaknesses
CWE-119

Affected products

References