VULNERABILITY INTELLIGENCE

CVE-2009-3617

CVSS score7.6 NONE
EPSS probability4.89%
CISA KEVNot currently listed
Published2009-10-20
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information.

Weakness classification

  • nvd@nist.gov: CWE-134

Primary references