CVE-2008-7249: Pedro Lineu Orso Sarg

High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days.

Buffer overflow in Squid Analysis Report Generator (Sarg) 2.2.3.1, and probably later, allows user-assisted remote attackers to execute arbitrary code via a long HTTP request method in a crafted access.log file, a different vulnerability than CVE-2008-1167.

Affected products

Published 2009-12-30. Last modified 2026-06-16.