Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2018-25271

Textpad 8.1.2 Denial of Service via Run Command

Description

Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command interface. Attackers can paste a 5000-byte payload into the Command field via Tools > Run to trigger a buffer overflow that crashes the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Textpad Textpad

  • 8.1.2affected

References