CVE-2009-1608

Microchip Mplab Ide - Memory Corruption

Title source: rule

Description

Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields.

Exploits (1)

exploitdb WORKING POC

pythonlocalwindows

https://www.exploit-db.com/exploits/8656

View on exploitdb

References (7)

[Third Party Advisory, VDB Entry] http://osvdb.org/54370

[Vendor Advisory] http://secunia.com/advisories/35054

[Various Sources] http://security.bkis.vn/?p=654

[Exploit] http://www.securityfocus.com/bid/34897

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/50418

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/50419

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/503400/100/0/threaded

Scores

EPSS 0.0791

EPSS Percentile 91.9%

Classification

CWE

CWE-119

Status draft

Affected Products (1)

microchip/mplab_ide

Timeline

Published May 11, 2009

Tracked Since Feb 18, 2026