CVE-2012-3544 in Sun Ray Software

Summary

Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

06/14/2012

Status

Confirmed

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
67149	Oracle Sun Ray Software input validation	20	Not defined	Official fix	CVE-2012-3544
67148	Oracle Virtual Desktop Infrastructure input validation	20	Not defined	Official fix	CVE-2012-3544
11924	Oracle Secure Global Desktop Apache Tomcat input validation	20	Not defined	Official fix	CVE-2012-3544
11843	Oracle Transportation Management Application Server input validation	20	Not defined	Official fix	CVE-2012-3544
11815	Oracle Enterprise Data Quality Internal Operations input validation	20	Not defined	Official fix	CVE-2012-3544
8665	Apache Tomcat Chunked Transfer Encoding Extension Size input validation	20	Not defined	Official fix	CVE-2012-3544

Sources

• MITRE
• NVD
• CVE Details