Note:
This project will be discontinued after December 13, 2021. [more]
2014-01-26
query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% (double percent) characters.
| Products | Cxxtools |
| Type | Resource Management Errors (CWE-399) |
| First patch | - None (likely due to unavailable code) |
| Links |
• http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown
• https://exchange.xforce.ibmcloud.com/vulnerabilities/90564 • http://seclists.org/oss-sec/2014/q1/116 • http://seclists.org/oss-sec/2014/q1/112 • http://www.securityfocus.com/bid/65020 |