No proper validation of the length of user input in http_server_get_content_type_from_extension.
Weakness
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations prior to the targeted buffer.
References