CVE-2009-20008

Description

Green Dam Youth Escort version 3.17 is vulnerable to a stack-based buffer overflow when processing overly long URLs. The flaw resides in the URL filtering component, which fails to properly validate input length before copying user-supplied data into a fixed-size buffer. A remote attacker can exploit this vulnerability by enticing a user to visit a specially crafted webpage containing a long URL, resulting in arbitrary code execution.

PUBLISHED Reserved 2025-08-27 | Published 2025-08-30 | Updated 2025-09-02 | Assigner VulnCheck

Problem types

CWE-121 Stack-based Buffer Overflow

Product status

Credits

Scott Wolchok finder

Randy Yao finder

J. Alex Halderman finder

References

web.archive.org/...ttp://www.cse.umich.edu/~jhalderm/pub/gd/ technical-description

en.wikipedia.org/wiki/Green_Dam_Youth_Escort product

www.exploit-db.com/exploits/8969 exploit

www.exploit-db.com/exploits/8938 exploit

raw.githubusercontent.com/...windows/browser/greendam_url.rb exploit

www.vulncheck.com/...reen-dam-url-processing-buffer-overflow third-party-advisory

cve.org (CVE-2009-20008)

nvd.nist.gov (CVE-2009-20008)

Download JSON