CVE-2007-2439 Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS devic...
HighCVSS 9.4
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denial of service (device hang) and read data from a COM or LPT device via a DOS device name with an arbitrary extension.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caucho technology resin | <= 3.1.0 | No fix listed |
References
- 36059 vdb-entry
- 25286 patch third-party-advisory vendor-advisory
- www.caucho.com patch
- www.rapid7.com patch
- 1018061 patch vdb-entry
- ADV-2007-1824 vdb-entry
- resin-dosdevice-information-disclosure(34301) vdb-entry