Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2018-25287

Drive Power Manager 1.10 Denial of Service via Name Field

Description

Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hdtune Drive Power Manager

  • 1.10affected

References