CVE-2009-0544

CVE-2009-0544 describes a critical buffer overflow vulnerability within the PyCrypto ARC2 module version 2.0.1. This flaw allows remote attackers to trigger a denial of service and potentially execute arbitrary code by supplying an excessively large ARC2 key length. With a CVSS score of 10.0, it presents a severe risk, indicating network-based exploitation with low complexity, leading to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, public exploit code exists on ExploitDB, suggesting potential for exploitation, though there is no evidence of widespread active exploitation or significant community discussion.