CVE-2007-4060: Frank Yaul Corehttp

High severity, CVSS 9.0. EPSS: 5.4% chance of exploitation in the next 30 days.

Multiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5.3alpha allow remote attackers to execute arbitrary code via a long string in the (1) method name or (2) URI in an HTTP request.

Affected products

• Frank Yaul Corehttp: version 0.5.3_alpha only

Published 2007-07-30. Last modified 2026-06-16.