CVE-2018-25243

FastTube 1.0.1.0 Denial of Service via Search

CVSS 6.9 MEDIUMEPSS 0.1%CWE-763

FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

FastTube · FastTube

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/46199unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.exploit-db.com/exploits/46199 https://www.microsoft.com/store/productId/9MXS9JVDP25V https://www.vulncheck.com/advisories/fasttube-denial-of-service-via-search