Title: Cart32 c32web.exe ShowProgress Function CPU Consumption Remote DoS
Info
Disclosure
Nov 10, 2000
Discovery
Unknown
Dates
Exploit
Nov 10, 2000
Solution
Unknown
Description
Cart32 contains a flaw that may allow a remote denial of service. The issue is triggered an error occurs in the ShowProgress function in the c32web.exe file, which will result in a consumption of CPU resources. This will cause a loss of availability for the program.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
OSVDB:
Web Related
Solution
Upgrade to version 3.5a or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.