CVE-2009-3711
Jasper Httpdx - Memory Corruption
Title source: ruleDescription
Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubyremotewindows
https://www.exploit-db.com/exploits/16799
exploitdb
WORKING POC
VERIFIED
by Pankaj Kohli · textremotewindows
https://www.exploit-db.com/exploits/10053
metasploit
WORKING POC
GREAT
rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/httpdx_handlepeer.rb
References (8)
Scores
EPSS
0.7894
EPSS Percentile
99.1%
Details
CWE
CWE-119
Status
published
Products (2)
jasper/httpdx
1.4
jasper/httpdx
1.4.3
Published
Oct 16, 2009
Tracked Since
Feb 18, 2026