CVE-2007-0533 Denial of service in n/a
Remote attackers can cause denial of service via crafted HTTP requests in the AToZed IntraWeb component for Delphi and Kylix.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2007-0533?
CVE-2007-0533 is a medium-severity denial of service vulnerability in n/a, published on 26 Jan 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object.
Which versions are affected by CVE-2007-0533?
It affects 1 product.
Products include Atozed Software Intraweb Component.
How do I fix CVE-2007-0533?
No fix has been published for CVE-2007-0533 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2007-0533 being exploited?
There is no known exploitation of CVE-2007-0533 in the wild and no public exploit code.
Sources
Also known as GHSA-7rjf-43hg-223v.