CVE Catalog
CVE-2017-17086
CriticalSummary
Indeo Otter through 1.7.4 mishandles a '</script>' substring in an initial DP payload, allowing remote attackers to cause a denial of service (crash) or possibly have unspecified other impact.
Risk Assessment
Attackers may exploit this vulnerability to remotely trigger a system crash, potentially leading to service availability interruptions.
Recommendation
It is recommended to update Indeo Otter to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Indeo Otter through 1.7.4 mishandles a "</script>" substring in an initial DP payload, which allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact, as demonstrated by the Plan Editor.