Stack-based Buffer Overflow Vulnerability in Green Dam Youth Escort Software
CVE-2009-20008

8.6HIGH

Key Information:

Vendor: Zhengzhou Jinhui Computer System Engineering Co. Ltd. ; Beijing Dazheng Human Language Technology Academy
Status: Green Dam Youth Escort
Vendor: CVE Published:; 30 August 2025

🔔 Create Zhengzhou Jinhui Computer System Engineering Co. Ltd. ; Beijing Dazheng Human Language Technology Academy Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2009-20008?

Green Dam Youth Escort version 3.17 contains a stack-based buffer overflow vulnerability triggered by overly long URLs. The defect occurs in the URL filtering system, which inadequately validates the length of input before copying user-supplied data into a fixed-size buffer. This oversight enables a remote attacker to craft a malicious webpage featuring a long URL, potentially leading to arbitrary code execution on the victim's system. Proper input validation is essential to mitigate such risks in software applications.

Affected Version(s)

Green Dam Youth Escort * < 3.174

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2009-20008 - Proof of Concept