← back
CVE-2018-25292

Bome Restorator 1793 Denial of Service via Buffer Overflow

CVSS 6.9 MEDIUMEPSS 0.1%CWE-120
Bome Restorator 1793 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can create a malicious payload exceeding 4000 bytes and paste it into the Name input field to trigger an application crash and denial of service.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
Bome · Restorator
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/45223unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.bome.com/https://www.bome.com/bome/downloads/Restorator2018_Full_1793.exehttps://www.exploit-db.com/exploits/45223https://www.vulncheck.com/advisories/bome-restorator-1793-denial-of-service-via-buffer-overflow