CVE-2007-2726 BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A"....
HighCVSS 7.8
EPSS 3.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitscast | = 0.13.0 | No fix listed |
References
- 39767 vdb-entry
- 23993 exploit vdb-entry
- bitscast-pubdate-dos(34344) vdb-entry
- 3929 exploit