vCore has discovered a vulnerability in jetCast Server, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in JSMP3OGGWt.dll when processing HTTP requests sent to the server. This can be exploited to crash the server via an overly-long, specially crafted HTTP request sent to default port 8000/TCP.

The vulnerability is confirmed in version 2. Other versions may also be affected.

Solution
Restrict access to the service.

Provided and/or discovered by
vCore

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/4403

Deep Links
Links available to Secunia VIM customers