CVE-2007-0533 Information

Description

The AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix and IntraWeb 9.0 before build (9.0.12) allows remote attackers to cause a denial of service (thread hang or CPU consumption) via a crafted HTTP request related to the OnBeforeDispatch function in the TIWServerController object.

Reference

http://blogs.atozed.com/Olaf/20070124.en.aspx http://blogs.atozed.com/Olaf/20070124A.en.aspx http://osvdb.org/32973 http://secunia.com/advisories/23902 http://www.securityfocus.com/archive/1/457758/100/0/threaded http://www.securityfocus.com/archive/1/457947/100/0/threaded http://www.securityfocus.com/archive/1/458121/100/0/threaded http://www.securityfocus.com/bid/22185 http://www.vupen.com/english/advisories/2007/0355 https://exchange.xforce.ibmcloud.com/vulnerabilities/31685