Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2018-25281

iCash 7.6.5 Denial of Service via Connect to Server

Description

iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload through the Connect to Server dialog. Attackers can paste a 7000-byte string into the Host field and click Connect to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Maxprog iCash

  • 7.6.5affected

References