CVE-2009-0650: Tptest

High severity, CVSS 10.0. EPSS: 12.8% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the GetStatsFromLine function in TPTEST 3.1.7 and earlier, and possibly 5.02, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a STATS line with a long pwd field. NOTE: some of these details are obtained from third party information.

Affected products

• Tptest Tptest: up to and including 3.1.7; version 5.0.2 only

Published 2009-02-20. Last modified 2026-06-16.