Icecast 1.3.7, and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot), / (forward slash), or (backward slash).
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Icecast | Icecast | 1.0.0 (including) | 1.0.0 (including) |
| Icecast | Icecast | 1.3.7 (including) | 1.3.7 (including) |
| Icecast | Icecast | 1.3.8_beta2 (including) | 1.3.8_beta2 (including) |