CVE-2019-25602
GSearch 1.0.1.0 Denial of Service via Search Input
In short
GSearch 1.0.1.0 crashes when users search for extremely long text strings. An attacker with local access can deliberately enter a very long search query to make the application stop working.
Technical detail
A buffer overflow vulnerability in GSearch 1.0.1.0's search functionality allows local attackers to trigger a denial of service condition by inputting strings exceeding 2000 characters. The vulnerability is triggered when the user submits the search query and selects a result, causing the application to crash due to improper input validation and buffer handling.
Summary generated and translated by AI from the official description.
GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers can paste a buffer of 2000 characters into the search field, click search, and select any result to trigger an application crash.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected products
GSearch · GSearchWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →