CVE-2017-12784

CVE-2017-12784 affects Youngzsoft CCFile (CC File Transfer) v3.6. A remote attacker can crash the application by sending a crafted HTTP request (example: header with many | characters) without authentication, causing a denial of service. Multiple sources corroborate a publicly reported DoS impact...

CVE-2017-12784: Improper Input Validation

In Youngzsoft CCFile aka CC File Transfer 3.6, by sending a crafted HTTP request, it is possible for a malicious user to remotely crash the affected software. No authentication is required. An example payload is a malformed request header with many '|' characters. NOTE: some sources use this ID f...