PT-2009-3069 · Tor · Tor

Ilja Van Sprundel · Published 2009-02-03 · Updated 2011-03-08 · CVE-2009-0414

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.0.33

Description The issue is related to an unspecified vulnerability that triggers heap corruption and has remote attack vectors. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited.

Recommendations For versions prior to 0.2.0.33, update to version 0.2.0.33 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-0414

Affected Products

Tor

References · 14

• 🔥 http://archives.seul.org/or/announce/Jan-2009/msg00000.html · Exploit
• https://redhat.com/archives/fedora-package-announce/2009-January/msg00902.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-0414 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2009-0414 · Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200904-11.xml · Vendor Advisory
• http://blog.torproject.org/blog/tor-0.2.0.33-stable-released · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-0414 · Vendor Advisory
• http://secunia.com/advisories/33635 · Vendor Advisory
• http://securityfocus.com/bid/33399 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-0414 · Security Note
• http://vupen.com/english/advisories/2009/0210 · Note
• http://securitytracker.com/id?1021633 · Note
• http://secunia.com/advisories/34583 · Note
• http://secunia.com/advisories/33677 · Note