CVE-2008-6897

CVE-2008-6897 describes multiple buffer overflow vulnerabilities in Andres Garcia Getleft 1.2, specifically within the Getleft.exe component. These flaws allow remote attackers to trigger a denial of service (application crash) and potentially execute arbitrary code by supplying overly long strings within various HTML tag attributes, such as the "a" tag, src attributes in embed, img, or script tags, and the background attribute in a body tag. The vulnerability carries a critical CVSS score of 9.3, indicating a network-based attack with medium complexity that can lead to complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog or Hot List, a proof-of-concept exploit is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.