Description
HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial of service (crash) via an HTTP request with a missing protocol version number, which triggers an exception. NOTE: some of these details were obtained from third party information.
References
- 26361 vdb-entry
- http://www.alhem.net/Sockets/Changelog
- 42105 vdb-entry
- csockets-httpsocket-dos(38309) vdb-entry
- 27535 third-party-advisory