← Database

CVE-2008-6897

CRITICAL CVSS: 9.3 Published: 2009-08-05 Modified: 2026-06-16

Description

Multiple buffer overflows in Getleft.exe in Andres Garcia Getleft 1.2 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) "a" HTML tag; a long src attribute in (2) embed, (3) img, or (4) script tags; (5) a long background attribute in a body tag; and other unspecified tags.

Affected Platforms

Andres Garcia Getleft

Weakness Type

CWE-119

References