Description
LionMax Software Chat Anywhere 2.72a allows remote attackers to cause a denial of service (server crash and client CPU consumption) via a username beginning with percent (%) followed by a null character.
References
- chat-anywhere-username-dos(17148) vdb-entry
- http://www.autistici.org/fdonato/advisory/ChatAnywhere2.72a-adv.txt
- 1011080 vdb-entry
- 9275 vdb-entry
- 12398 third-party-advisory
- 20040827 DoS in Chat Anywhere 2.72a mailing-list