4.3
CVE-2008-6742
- EPSS 2.16%
- Veröffentlicht 21.04.2009 18:30:00
- Zuletzt bearbeitet 16.06.2026 23:02:53
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Foxy P2P software allows remote attackers to cause a denial of service (memory consumption) via a foxy URI with a download action and a large fs value.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.16% | 0.799 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:N/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
http://www.securityfocus.com/bid/29776
https://exchange.xforce.ibmcloud.com/vulnerabilities/43146
https://www.exploit-db.com/exploits/5843