CVE-2007-0157

Vulnerability

Array index error in the uri_lookup function of the URI parser in neon versions 0.26.0 to 0.26.2, possibly only on 64-bit platforms, allows remote malicious servers to cause a denial of service (crash). The vulnerability arises from a type conversion error that generates a negative index when processing a URI with non-ASCII characters, leading to a buffer under-read [1][2][3].

Exploitation

An attacker can remotely trigger this vulnerability by sending a specially crafted URI containing non-ASCII characters to a service using the vulnerable neon library. No authentication or special privileges are required; the attacker only needs network access to deliver the malicious URI.

Impact

Successful exploitation results in a denial of service due to a crash of the application using the vulnerable neon library. There is no indication of information disclosure or remote code execution; the impact is limited to availability.

Mitigation

The available references do not disclose a specific fixed version. Users should check for updates to neon beyond 0.26.2. If no patch is available, consider filtering or sanitizing URIs to remove non-ASCII characters as a workaround.