Buffer overflow in Microchip Mplab Ide

CVE-2009-1674

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOL_SETTINGS] section in a .mcp file, possibly a related issue to CVE-2009-1608.

Vulnerability class: Buffer Overflow

EPSS: 0.049 (91.2th percentile) — read the EPSS interpretation.

Affected products

Microchip Mplab_ide — versions 8.30
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)