CVE-2019-25667

TaskInfo 8.2.0.280 Denial of Service Buffer Overflow

CVSS 6.9 MEDIUMEPSS 0.2%CWE-787

TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields. Attackers can paste excessively long strings into the New User Name or New Serial Number textboxes in the Help menu's registration dialog to trigger a denial of service condition.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Productos afectados

Iarsn · TaskInfo

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/46314no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://www.exploit-db.com/exploits/46314 https://www.vulncheck.com/advisories/taskinfo-denial-of-service-buffer-overflow http://www.iarsn.com/