CVE Catalog
CVE-2017-7679
CriticalSummary
In Apache httpd versions 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.
Risk Assessment
An attacker could exploit this vulnerability to inject malicious data, potentially leading to unauthorized access or data loss.
Recommendation
It is recommended to update Apache httpd to the latest version to mitigate this vulnerability.
Original NVD description (English source)
In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.