Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
wwwoffled in World Wide Web Offline Explorer (WWWOFFLE) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a negative Content-Length value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Andrew Bishop WWWOFFLE 负Content-length值远程缓冲区溢出漏洞
Vulnerability Description
WWWOFFLE是一款WEB离线浏览器，支持HTTP/FTP代理服务。 WWWOFFLE在处理"Content-Length"字段时存在漏洞，远程攻击者可以利用这个漏洞进行远程缓冲区溢出攻击。 WWWOFFLE对HTTP请求中"Content-Length"字段为负值的请求处理不正确，远程攻击者可以提交一个"Content-Length"字段为负整数的值，当由无符号数值为参数的memcpy()函数处理时，程序会发生缓冲区溢出，精心构建提交HTTP请求数据可能导致攻击者以WWWOFFLE进程的权限在系统上执
CVSS Information
N/A
Vulnerability Type
N/A