Cart32 contains a flaw that may allow a remote denial of service. The issue is triggered an error occurs in the ShowProgress function in the c32web.exe file, which will result in a consumption of CPU resources. This will cause a loss of availability for the program.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
OSVDB:
Web Related
Solution
Upgrade to version 3.5a or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.
