NetSight
IP …
critical9.3Public exploit code

CVE-2009-1586

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the NZB importer feature in GrabIt 1.7.2 Beta 3 and earlier allows remote attackers to execute arbitrary code via a crafted DTD reference in a DOCTYPE element in an NZB file.

Affected products

VendorProductAffected versions
ShemesGrabit
through 1.7.2
Versions 1.5.0, 1.5.1, 1.5.2, 1.5.3, 1.6.1

Weakness classification

CWE-119

References