Improper input validation in W3c Libwww

CVE-2005-3183

The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.021 (79.8th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References