CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.6. It may be remotely exploitable. It may lead to a denial-of-service condition.
CVE
CVE-2009-3617
Severity
HIGH
CVSS
7.6
EPSS
4.89%
Original NVD Description
Format string vulnerability in the AbstractCommand::onAbort function in src/AbstractCommand.cc in aria2 before 1.6.2, when logging is enabled, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via format string specifiers in a download URI. NOTE: some of these details are obtained from third party information.