CVE-2008-3429: Httrack

Medium severity, CVSS 6.8. EPSS: 3.7% chance of exploitation in the next 30 days.

Buffer overflow in URI processing in HTTrack and WinHTTrack before 3.42-3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL.

Affected products

• Httrack Httrack: version 0.23 only; version 0.24 only; version 0.25 only; version 0.99 only; version 0.996 only; version 0.997 only; …
• Httrack Winhttrack: up to and including 3.42; version 0.23 only; version 0.24 only; version 0.25 only; version 0.99 only; version 0.996 only; …

Published 2008-07-31. Last modified 2026-06-16.