cve/2012/CVE-2012-3544.md

CVE-2012-3544

Description

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

POC

Reference

• http://seclists.org/fulldisclosure/2014/Dec/23
• http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
• http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
• http://www.vmware.com/security/advisories/VMSA-2014-0012.html

Github

• https://github.com/ARPSyndicate/cve-scores