CVE-2007-0796 Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP CONNECT reques...
HighCVSS 7.5
EPSS 12.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long HTTP CONNECT request, which triggers heap corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bluecoat winproxy | = 6.0-r1c | No fix listed |
| bluecoat winproxy | = 6.1-r1a | No fix listed |
References
- 20070202 Blue Coat Systems WinProxy CONNECT Method Heap Overflow Vulnerability patch third-party-advisory vendor-advisory
- 33097 vdb-entry
- 24049 third-party-advisory
- 1017586 vdb-entry
- 22393 vdb-entry
- ADV-2007-0482 vdb-entry
- winproxy-connect-bo(32204) vdb-entry