PT-2025-35364 · Unknown · Green Dam Youth Escort 3.17

Published 2025-08-30 · Updated 2025-08-30 · CVE-2009-20008

Positive Technologies (AI Summary)

CVSS v4.0

8.6

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Green Dam Youth Escort version 3.17

Description Green Dam Youth Escort version 3.17 is susceptible to a stack-based buffer overflow when handling excessively long URLs. The issue is located within the URL filtering component, which does not adequately validate the length of input data before copying it into a fixed-size buffer. An attacker can exploit this by tricking a user into visiting a malicious webpage with a long URL, potentially leading to arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2009-20008

Affected Products

Green Dam Youth Escort 3.17

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2009-20008 · Security Note
• https://exploit-db.com/exploits/8969 · Note
• https://en.wikipedia.org/wiki/Green_Dam_Youth_Escort · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/greendam_url.rb · Note
• https://t.me/CVEtracker/31326 · Telegram Post
• https://vulncheck.com/advisories/green-dam-url-processing-buffer-overflow · Note
• https://exploit-db.com/exploits/8938 · Note
• https://web.archive.org/web/20110426190759/http://cse.umich.edu/~jhalderm/pub/gd · Note