{"uuid": "3ec0607f-4af9-4775-865e-a9dabb2e3dcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-20008", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/greendam_url.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Trancer \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a stack-based buffer overflow in Green Dam Youth Escort\\n          version 3.17 in the way it handles overly long URLs.\\n          By setting an overly long URL, an attacker can overrun a buffer and execute\\n          arbitrary code. This module uses the .NET DLL memory technique by Alexander\\n          Sotirov and Mark Dowd and should bypass DEP, NX and ASLR.\", \"disclosure_date\": \"2009-06-11\", \"fullname\": \"exploit/windows/browser/greendam_url\", \"is_install_path\": true, \"mod_time\": \"2025-10-06 17:15:11 +0000\", \"name\": \"Green Dam URL Processing Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/greendam_url.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/greendam_url\", \"references\": [\"CVE-2009-20008\", \"OSVDB-55126\", \"URL-http://web.archive.org/web/20110426190759/http://www.cse.umich.edu/~jhalderm/pub/gd/\", \"EDB-8938\", \"URL-http://taossa.com/archive/bh08sotirovdowd.pdf\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Windows XP SP0-SP3 / Windows Vista SP0-SP1 / IE 6.0 SP0-2 & IE 7.0\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:02.715882Z"}