CVE-2009-4413
Polipo 0.9.8, 0.9.12, 1.0.4 - Denial of Service via Large Content-Length Request
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-4413. PoCs published by Jeremy Brown.
AI-analyzed exploit summary This Perl script exploits a memory corruption vulnerability in Polipo 1.0.4 by sending a crafted HTTP request with an invalid Content-Length header, triggering a segmentation fault due to improper handling of the request buffer.
Description
The httpClientDiscardBody function in client.c in Polipo 0.9.8, 0.9.12, 1.0.4, and possibly other versions, allows remote attackers to cause a denial of service (crash) via a request with a large Content-Length value, which triggers an integer overflow, a signed-to-unsigned conversion error with a negative value, and a segmentation fault.
Exploits (1)
This Perl script exploits a memory corruption vulnerability in Polipo 1.0.4 by sending a crafted HTTP request with an invalid Content-Length header, triggering a segmentation fault due to improper handling of the request buffer.