OSVDB ID: 85297

Title: Cart32 c32web.exe ShowProgress Function CPU Consumption Remote DoS

Info

Disclosure

Nov 10, 2000

Discovery

Unknown

Dates

Exploit

Nov 10, 2000

Solution

Unknown

Description

Cart32 contains a flaw that may allow a remote denial of service. The issue is triggered an error occurs in the ShowProgress function in the c32web.exe file, which will result in a consumption of CPU resources. This will cause a loss of availability for the program.

Classification

Location: Remote / Network Access
Impact: Loss of Availability
Exploit: Exploit Public
Disclosure: Uncoordinated Disclosure
OSVDB: Web Related

Solution

Upgrade to version 3.5a or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

McMurtrey/Whitaker and Associates

Cart32

3.5
3.1
3.0

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/85297