CVE-2009-1608

Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2009-05-11

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Mplab Ide (Microchip)

References

• http://osvdb.org/54370
• http://secunia.com/advisories/35054
• http://security.bkis.vn/?p=654
• http://www.securityfocus.com/archive/1/503400/100/0/threaded
• http://www.securityfocus.com/bid/34897
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50418
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50419