CVE-2013-7298

query_params.cpp in cxxtools before 2.2.1 allows remote attackers to cause a denial of service (infinite recursion and crash) via an HTTP query that contains %% (double percent) characters.

Date published : 2014-01-26

http://www.securityfocus.com/bid/65020

http://www.tntnet.org/download/cxxtools-2.2.1/Releasenotes-2.2.1.markdown