medium6.8Public exploit code
CVE-2008-3667
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Maxthon Browser 1.x - Content-Type Buffer Overflow2008-08-09 · remote · windows · Verified
Impact
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows remote attackers to execute arbitrary code via a long Content-type HTTP header.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maxthon | Maxthon Browser | through 2.0 Versions 1.1.39, 1.2, 1.2.1, 1.6.3.80 |
Weakness classification
References
- NVD record
- CVE.org record
- http://downloads.securityfocus.com/vulnerabilities/exploits/30617-poc.pl
- http://www.securityfocus.com/bid/30617
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44381
- http://downloads.securityfocus.com/vulnerabilities/exploits/30617-poc.pl
- http://www.securityfocus.com/bid/30617
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44381