Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2019-25463

SpotIE Internet Explorer Password Recovery 2.9.5 Key Field DoS

Description

SpotIE Internet Explorer Password Recovery 2.9.5 contains a denial of service vulnerability in the registration key input field that allows local attackers to crash the application by supplying an excessively long string. Attackers can paste a 256-character payload into the Key field during registration to trigger a buffer overflow and crash the application.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nsauditor SpotIE Internet Explorer Password Recovery

  • 2.9.5affected

References