CVE-2009-4875 FCKeditor.Java 2.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed request parameter that contains "ctrl" characters.
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FCKeditor.Java 2.4 allows remote attackers to cause a denial of service (infinite loop) via a malformed request parameter that contains "ctrl" characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| frederico caldeira knabben fckeditor.java | = 2.4 | No fix listed |
References
- dev.fckeditor.net
- java.fckeditor.net
- 35870 third-party-advisory vendor-advisory
- sourceforge.net
- 56060 vdb-entry
- 35709 vdb-entry
- fckeditorjava-ctrl-dos(51738) vdb-entry