CVE-2009-3861
SafeNet SoftRemote <10.8.9 - Buffer Overflow
Title source: llmDescription
Stack-based buffer overflow in SafeNet SoftRemote 10.8.5 (Build 2) and 10.3.5 (Build 6), and possibly other versions before 10.8.9, allows local users to execute arbitrary code via a long string in a (1) TREENAME or (2) GROUPNAME Policy file (spd).
Exploits (2)
exploitdb
WORKING POC
VERIFIED
by Metasploit · rubylocalwindows
https://www.exploit-db.com/exploits/16643
metasploit
WORKING POC
GOOD
by MC · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/safenet_softremote_groupname.rb
References (4)
Scores
EPSS
0.0657
EPSS Percentile
91.2%
Details
CWE
CWE-119
Status
published
Products (16)
safenet-inc/softremote
1.7.1
safenet-inc/softremote
1.7.2
safenet-inc/softremote
1.7.7
safenet-inc/softremote
1.8.1
safenet-inc/softremote
1.9.0
safenet-inc/softremote
10.3.5
safenet-inc/softremote
10.7.7
safenet-inc/softremote
10.8.0
safenet-inc/softremote
10.8.1
safenet-inc/softremote
10.8.2
... and 6 more
Published
Nov 04, 2009
Tracked Since
Feb 18, 2026