CVE-2009-1608

Published: May 11, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in Microchip MPLAB IDE 8.30 and possibly earlier versions allow user-assisted remote attackers to execute arbitrary code via a .MCP project file with long (1) FILE_INFO, (2) CAT_FILTERS, and possibly other fields.

Affected (1)

Products: Microchip: Mplab Ide

Microchip

1 product

Mplab Ide

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microchip Mplab Ide	Version 8.30

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (14)

http://osvdb.org/54370

Source: cve@mitre.org

http://secunia.com/advisories/35054

Source: cve@mitre.org

Vendor Advisory

http://security.bkis.vn/?p=654

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/503400/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/34897

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/50418

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/50419

Source: cve@mitre.org

http://osvdb.org/54370