Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2018-25234

SmartFTP Client 9.0.2615.0 Denial of Service via Host Field

Description

SmartFTP Client 9.0.2615.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Host field. Attackers can paste a buffer of 300 repeated characters into the Host connection parameter to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Smartftp SmartFTP Client

  • 9.0.2615.0affected

References