Description
The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0 before build (9.0.12), allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request, related to the OnBeforeDispatch function in the TIWServerController object.
References
- 20070124 Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability mailing-list
- intraweb-component-dos(31685) vdb-entry
- 23902 third-party-advisory
- 22185 vdb-entry
- ADV-2007-0355 vdb-entry
- http://blogs.atozed.com/Olaf/20070124A.en.aspx
- 20070123 AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability mailing-list
- http://blogs.atozed.com/Olaf/20070124.en.aspx
- 20070125 Re: AToZed Software Intraweb Component for Borland Delphi and Kylix DoS vulnerability mailing-list
- 32973 vdb-entry