CVE-2007-6423

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-01-12 · updated 2026-06-16
Weakness: CWE-399

Description

Unspecified vulnerability in mod_proxy_balancer for Apache HTTP Server 2.2.x before 2.2.7-dev, when running on Windows, allows remote attackers to trigger memory corruption via a long URL. NOTE: the vendor could not reproduce this issue

Affected products

Apache HTTP Server: 2.2.2, 2.2.3, 2.2.4, 2.2.6

References

http://securityreason.com/securityalert/3523
http://www.securityfocus.com/archive/1/486169/100/0/threaded
http://www.securityfocus.com/bid/27236
http://securityreason.com/securityalert/3523
http://www.securityfocus.com/archive/1/486169/100/0/threaded
http://www.securityfocus.com/bid/27236

Get alerted when CVE-2007-6423 or the next vulnerability affects your stack