Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the http_fetch function of HTTP Fetcher 1.0.0 and 1.0.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a URL request via a long (1) host, (2) referer, or (3) userAgent value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
HTTP Fetcher库多个缓冲区溢出漏洞
Vulnerability Description
HTTP Fetcher是一款可以从HTTP下载文件的小型库。 HTTP Fetcher在处理HTTP数据时缺少正确的边界缓冲区检查，远程攻击者可以利用这个漏洞进行缓冲区溢出攻击，以Fetcher进程权限在系统上执行任意指令。 由于http_fetch()函数用于拷贝各种HTTP数据，攻击者可以在各种用户提供参数中提交过多数据，就可以触发多个缓冲区溢出。成功利用此漏洞，可以导致攻击者攻击连接此库的应用程序，通过覆盖函数指令指针而执行任意指令。 注：要利用这个漏洞只有在客户端通过代理服务器远程访问服务条件下
CVSS Information
N/A
Vulnerability Type
N/A