Skip to content

CVE-2007-4060 Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) UR...

HighCVSS 9.0 EPSS 5.4%
Published
Updated
Exploit status
No public exploit known

Description

Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) URI in an HTTP request.

Affected products

ProductAffected versionsFixed in
frank yaul corehttp = 0.5.3_alpha No fix listed

References