medium4.3Public exploit code
CVE-2009-3857
Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service (application crash) via a Ruby (.rb) fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ScITE Editor 1.72 - Local Crash2009-07-13 · dos · windows · Verified
Impact
Buffer overflow in Softonic International SciTE 1.72 allows user-assisted remote attackers to cause a denial of service (application crash) via a Ruby (.rb) file containing a long string, which triggers the crash when a scroll bar is used.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Softonic | Scite | Version 1.72 |