Description
The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/archive/1/457947/100/0/threaded ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31685 ↗
- http://secunia.com/advisories/23902 ↗
- http://www.securityfocus.com/bid/22185 ↗
- http://www.vupen.com/english/advisories/2007/0355 ↗
- http://blogs.atozed.com/Olaf/20070124A.en.aspx ↗
- http://www.securityfocus.com/archive/1/457758/100/0/threaded ↗
- http://blogs.atozed.com/Olaf/20070124.en.aspx ↗
- http://www.securityfocus.com/archive/1/458121/100/0/threaded ↗
- http://osvdb.org/32973 ↗