CVE-2019-25434

Katalog CVE

CVSS 5.5 · Medium EPSS 0,32%

Kerentanan Stack-based Buffer Overflow pada nsasoft spotauditor. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting excessive data in the registration name field. Attackers can enter a large string of characters (5000 bytes or more) in the name field during registration to trigger an unhandled exception that crashes the application.

Rincian

Terbit di NVD

20 Februari 2026

Terakhir diubah

29 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,32% peluang dieksploitasi; lebih tinggi dari 23,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/spotauditor-denial-of-service-via-registration-name-field advisory pihak ketiga
• https://www.exploit-db.com/exploits/47494 exploit · vdb entry
• http://www.nsauditor.com product