CVE-2007-2722 Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instability) via certain invalid strings in the URL attribute of an ENCLOSURE element, as...
HighCVSS 7.8
EPSS 3.2%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instability) via certain invalid strings in the URL attribute of an ENCLOSURE element, as demonstrated by a "%s" sequence, a "%Y" sequence, a "%%" sequence, and an "n," sequence.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| newzcrawler | = 1.8 | No fix listed |
References
- 39768 vdb-entry
- 23994 vdb-entry
- newzcrawler-enclosure-dos(34350) vdb-entry
- 3930 exploit