CVE-2009-1674: Buffer Overflow

Published May 18, 2009

Updated

Stack-based buffer overflow in Microchip MPLAB IDE 8.30 allows user-assisted remote attackers to execute arbitrary code via a long .cof pathname in a [TOOLSETTINGS] section in a .mcp file, possibly a related issue to CVE-2009-1608.

Affected Software

1 affected component

Microchip MPLAB IDE=8.30

Event History

May 18, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-1674?

CVE-2009-1674 has been classified as a high-severity vulnerability due to its potential for remote code execution.

How does CVE-2009-1674 exploit a buffer overflow?

CVE-2009-1674 exploits a stack-based buffer overflow through improperly handling long .cof pathnames in a .mcp file.

Which versions of Microchip MPLAB IDE are affected by CVE-2009-1674?

CVE-2009-1674 specifically affects Microchip MPLAB IDE version 8.30.

How do I fix CVE-2009-1674?

To fix CVE-2009-1674, users should upgrade to a version of Microchip MPLAB IDE that is not vulnerable, following vendor guidance.

Can CVE-2009-1674 be exploited without user interaction?

CVE-2009-1674 requires user-assisted interactions, as the attack relies on the user opening a malicious .mcp file.