CVE-2007-0539

2007-01-2900:00:00

ubuntu.com

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.011 Low

EPSS

Percentile

84.7%

JSON

The wp_remote_fopen function in WordPress before 2.1 allows remote
attackers to cause a denial of service (bandwidth or thread consumption)
via pingback service calls with a source URI that corresponds to a large
file, which triggers a long download session without a timeout constraint.