acWEB 1.14 allows remote attackers to cause a denial of service (crash) via an HTTP request for a MS-DOS device name such as COM2.

Published Nov 1, 2007 · Updated Sep 16, 2024 · Assigned by mitre