CVE-2019-25602mediumCWE-1260

CVE-2019-25602: medium-severity vulnerability in GSearch

GSearch 1.0.1.0 Denial of Service via Search Input

Published · Updated

Follow this CVE+ Monitor GSearch

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.8epss 0.1%
In short

GSearch 1.0.1.0 crashes when users search for extremely long text strings. An attacker with local access can deliberately enter a very long search query to make the application stop working.

Technical detail

A buffer overflow vulnerability in GSearch 1.0.1.0's search functionality allows local attackers to trigger a denial of service condition by inputting strings exceeding 2000 characters. The vulnerability is triggered when the user submits the search query and selects a result, causing the application to crash due to improper input validation and buffer handling.

Summary generated and translated by AI from the official description.
GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers can paste a buffer of 2000 characters into the search field, click search, and select any result to trigger an application crash.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
GSearch · GSearch