Icecast 1.3.7 and other versions before 1.3.11 with HTTP server file streaming support enabled allows remote attackers to cause a denial of service (crash) via a URL that ends in . (dot) / (forward slash) or \\ (backward slash).