high7.8Public exploit code
CVE-2007-2722
Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instability) via certain invalid strings in the …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NewzCrawler 1.8 - invalid string Remote Denial of Service2007-05-15 · dos · windows · Verified
Impact
Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instability) via certain invalid strings in the URL attribute of an ENCLOSURE element, as demonstrated by a "%s" sequence, a "%Y" sequence, a "%%" sequence, and an "n," sequence.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Newzcrawler | Newzcrawler | Version 1.8 |
References
- NVD record
- CVE.org record
- http://osvdb.org/39768
- http://www.securityfocus.com/bid/23994
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34350
- https://www.exploit-db.com/exploits/3930
- http://osvdb.org/39768
- http://www.securityfocus.com/bid/23994
- https://exchange.xforce.ibmcloud.com/vulnerabilities/34350
- https://www.exploit-db.com/exploits/3930