Hi,

In our customer environments, AutoStart 5.3 SP3 is be installing. I learned there is vulnerability in this release to allow an unauthenticated user to send a specially crafted message over TCP to potentially cause a denial of service, or possibly, execute arbitrary code within the context of the affected application.

I'm evaluating the impact of this vulnerability. Would you please give more detailed information about this vulnerability? What service is used by unauthenticated user? What will the deial of service do? In what environment, it can be avoided?

Thanks in advance.