Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2018-25244

Eco Search 1.0.2.0 Denial of Service

Description

Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a search operation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

EcoSearch Eco Search

  • 1.0.2.0affected

References