← Database

CVE-2006-7197

HIGH CVSS: 7.8 Published: 2007-04-25 Modified: 2026-06-16

Description

The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.

Affected Platforms

Apache Tomcat

Weakness Type

NVD-CWE-Other

References