Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2019-25326

ipPulse 1.92 - 'Enter Key' Denial of Service

Description

ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the application by providing an oversized input in the Enter Key field. Attackers can generate a 256-byte buffer of repeated 'A' characters to trigger an application crash when pasting the malicious content.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Northwest Performance Software, Inc. ipPulse

  • 1.92affected

References