CVE-2018-25244

Eco Search 1.0.2.0 Denial of Service

CVSS 6.9 MEDIUMEPSS 0.2%CWE-1312

Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a search operation.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

EcoSearch · Eco Search

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/46196unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.exploit-db.com/exploits/46196 https://www.microsoft.com/store/productId/9N05DCQP5C3W https://www.vulncheck.com/advisories/eco-search-denial-of-service