SurfNOW 2.2 allows remote attackers to cause a denial of service (crash) via a series of long HTTP GET requests, possibly triggering a buffer overflow.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Surfnow_professional | Loom_software | 1.2 (including) | 1.2 (including) |
| Surfnow_professional | Loom_software | 1.4 (including) | 1.4 (including) |
| Surfnow_professional | Loom_software | 1.5 (including) | 1.5 (including) |
| Surfnow_professional | Loom_software | 1.6 (including) | 1.6 (including) |
| Surfnow_professional | Loom_software | 2.0 (including) | 2.0 (including) |
| Surfnow_professional | Loom_software | 2.1 (including) | 2.1 (including) |
| Surfnow_professional | Loom_software | 2.2 (including) | 2.2 (including) |
| Surfnow_standard | Loom_software | 1.2 (including) | 1.2 (including) |
| Surfnow_standard | Loom_software | 1.4 (including) | 1.4 (including) |
| Surfnow_standard | Loom_software | 1.5 (including) | 1.5 (including) |
| Surfnow_standard | Loom_software | 1.6 (including) | 1.6 (including) |
| Surfnow_standard | Loom_software | 2.0 (including) | 2.0 (including) |
| Surfnow_standard | Loom_software | 2.1 (including) | 2.1 (including) |
| Surfnow_standard | Loom_software | 2.2 (including) | 2.2 (including) |