CVE-2007-2197 | BDVDB-2026-23699 Detail

Description#

Race condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23, and trunk.379 through trunk.445 allows remote attackers to obtain other clients' HTTP responses via multiple simultaneous requests, which triggers multiple calls to HttpWorkerRequest.FlushResponse for the same HttpWorkerRequest object and causes a buffer to be reused for a different request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/23578
https://exchange.xforce.ibmcloud.com/vulnerabilities/33785
http://www.securityfocus.com/archive/1/466404/100/0/threaded
http://secunia.com/advisories/25003

Exploit#

No public exploit known

History#

Version 12007-04-24Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.