In Youngzsoft CCFile (aka CC File Transfer) 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID for a NoviWare issue, but the correct ID for that issue is CVE-2017-12787.
References
Link | Resource |
---|---|
https://drive.google.com/file/d/0B9DojFnTUSNGcG1WN2Q1eVZMQTg/view | Exploit Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2017-08-21T07:00:00
Updated: 2017-08-22T16:57:02
Reserved: 2017-08-10T00:00:00
Link: CVE-2017-12784
JSON object: View
NVD Information
Status : Analyzed
Published: 2017-08-21T07:29:00.187
Modified: 2017-08-25T17:42:08.753
Link: CVE-2017-12784
JSON object: View
Redhat Information
No data.
CWE