Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2018-25239

Smart VPN 1.1.3.0 Denial of Service via Search

Description

Smart VPN 1.1.3.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input through the search interface. Attackers can paste a buffer of 2100 characters into the top right search bar to trigger an unhandled exception that crashes the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SmartVPN Smart VPN

  • 1.1.3.0affected

References