← Database

CVE-2007-2726

HIGH CVSS: 7.8 Published: 2007-05-16 Modified: 2026-06-16

Description

BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with certain invalid strings in a pubDate element, as demonstrated by repeated "../A" or "A/../" patterns.

Affected Platforms

Bitscast Bitscast

Weakness Type

NVD-CWE-Other

References