In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, mod_mime can read one byte past the end of a buffer when sending a malicious Content-Type response header.

Published: 2017-06-20

CVSS: 9.8

CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Download CVE-2017-7679 POC (Proof-of-Concept) here:

Tip: Download official Tor Browser at https://www.torproject.org/download/ to access .onion links.

https://connollyfinan.ie/poc-436-cve-2025-21479/

https://connollyfinan.ie/poc-518-cve-2025-54948/

https://connollyfinan.ie/poc-530-cve-2023-21716/

https://connollyfinan.ie/poc-474-cve-2016-1000027/