VulnerabilityModified
CVE-2007-0533
The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the…
MEDIUM 5.0EPSS 2.78%
Does this matter?
Lower severity and a low EPSS score (2.78%). Track it; it rarely justifies an emergency change on its own.
Description
The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
- EPSS
- 2.78% probability · 86th percentile
- CISA KEV
- Not listed
- Affected
- atozed software/intraweb component
- Source
- cve@mitre.org
References
- http://blogs.atozed.com/Olaf/20070124.en.aspx
- http://blogs.atozed.com/Olaf/20070124A.en.aspx
- http://osvdb.org/32973
- http://secunia.com/advisories/23902
- http://www.securityfocus.com/archive/1/457758/100/0/threaded
- http://www.securityfocus.com/archive/1/457947/100/0/threaded
- http://www.securityfocus.com/archive/1/458121/100/0/threaded
- http://www.securityfocus.com/bid/22185
- http://www.vupen.com/english/advisories/2007/0355
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31685
- http://blogs.atozed.com/Olaf/20070124.en.aspx
- http://blogs.atozed.com/Olaf/20070124A.en.aspx
- http://osvdb.org/32973
- http://secunia.com/advisories/23902
- http://www.securityfocus.com/archive/1/457758/100/0/threaded
- http://www.securityfocus.com/archive/1/457947/100/0/threaded
- http://www.securityfocus.com/archive/1/458121/100/0/threaded
- http://www.securityfocus.com/bid/22185
- http://www.vupen.com/english/advisories/2007/0355
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31685
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.