Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2018-25240

Watchr 1.1.0.0 Denial of Service via Search

Description

Watchr 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 8145 characters into the search bar and trigger a search operation to cause the application to crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Watchr Watchr

  • 1.1.0.0affected

References