CVE-2007-4980

Gcaldaemon - Numeric Error

Title source: rule

Description

The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers to cause a denial of service via a large integer value in the Content-Length HTTP header, which triggers a fatal Java OutOfMemoryError.

Exploits (1)

exploitdb WORKING POC VERIFIED

by ikki · perldosmultiple

https://www.exploit-db.com/exploits/4540

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://osvdb.org/40922

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/479816/100/0/threaded

[Third Party Advisory] http://securityreason.com/securityalert/3154

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/36670

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/25704

Scores

EPSS 0.0572

EPSS Percentile 90.5%

Details

CWE

CWE-189

Status published

Products (1)

gcaldaemon/gcaldaemon 1.0_beta13

Published Sep 19, 2007

Tracked Since Feb 18, 2026