CVE-2009-3663: Jasper Httpdx

High severity, CVSS 10.0. EPSS: 14.6% chance of exploitation in the next 30 days.

Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host header.

Affected products

• Jasper Httpdx: version 1.4 only

Published 2009-10-11. Last modified 2026-06-16.