CVE:CVE-2008-3429
CNNVD:CNNVD-200807-518
HTTrack是一个相当容易使用的脱机阅览软件，能将网站传送到计算机目录里，并且会将所有相关链结重新组织，以方便更顺利的脱机浏览。
HTTrack和WinHTTrack3.42-3之前的版本中的URI进程存在缓冲区溢出漏洞。远程攻击者可以借助一个长的URI，引起拒绝服务攻击(崩溃)以及可能执行任意代码。
solution:Upgrade httrack httrack to a higher version than 0.23:beta-2,0.24:beta-2,0.25:beta-2,0.99:beta-2,0.996:beta-2,0.997:beta-2,0.998:beta-2,1.00,1.01,1.02,1.03,1.04,1.10,1.10:b,1.10:c,1.10:d,1.10:e,1.11,1.15,1.15:b,1.16,1.16:b,1.20,1.21,1.22,1.23,1.24,1.30,2.00,2.01,2.2,2.02,3.00,3.01,3.02,3.03,3.04,3.05,3.06,3.07,3.08,3.09,3.10,3.15,3.16:2,3.20:2,3.21:8,3.22:3,3.23,3.30,3.31,3.32,3.33,3.40,3.40:2,3.41,3.41:2,3.41:3,3.42,3.42:2,3.42:3,and avoid the version 0.23:beta-2,0.24:beta-2,0.25:beta-2,0.99:beta-2,0.996:beta-2,0.997:beta-2,0.998:beta-2,1.00,1.01,1.02,1.03,1.04,1.10,1.10:b,1.10:c,1.10:d,1.10:e,1.11,1.15,1.15:b,1.16,1.16:b,1.20,1.21,1.22,1.23,1.24,1.30,2.00,2.01,2.2,2.02,3.00,3.01,3.02,3.03,3.04,3.05,3.06,3.07,3.08,3.09,3.10,3.15,3.16:2,3.20:2,3.21:8,3.22:3,3.23,3.30,3.31,3.32,3.33,3.40,3.40:2,3.41,3.41:2,3.41:3,3.42,3.42:2,3.42:3; Upgrade httrack winhttrack to a higher version than *:2,0.23:beta-2,0.24:beta-2,0.25:beta-2,0.99:beta-2,0.996:beta-2,0.997:beta-2,0.998:beta-2,1.00,1.01,1.02,1.03,1.04,1.10,1.10:b,1.10:c,1.10:d,1.10:e,1.11,1.15,1.16,1.16:b,1.20,1.21,1.22,1.23,1.24,1.30,2.00,2.01,2.02,2.2,3.00,3.01,3.02,3.03,3.04,3.05,3.06,3.07,3.08,3.09,3.10,3.15,3.15:b,3.16:2,3.20:2,3.21:8,3.22:3,3.23,3.30,3.31,3.32,3.33,3.40,3.40:2,3.41,3.41:2,3.41:3,3.42,and avoid the version *:2,0.23:beta-2,0.24:beta-2,0.25:beta-2,0.99:beta-2,0.996:beta-2,0.997:beta-2,0.998:beta-2,1.00,1.01,1.02,1.03,1.04,1.10,1.10:b,1.10:c,1.10:d,1.10:e,1.11,1.15,1.16,1.16:b,1.20,1.21,1.22,1.23,1.24,1.30,2.00,2.01,2.02,2.2,3.00,3.01,3.02,3.03,3.04,3.05,3.06,3.07,3.08,3.09,3.10,3.15,3.15:b,3.16:2,3.20:2,3.21:8,3.22:3,3.23,3.30,3.31,3.32,3.33,3.40,3.40:2,3.41,3.41:2,3.41:3,3.42