Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2019-25551

Sandboxie 5.30 Denial of Service via Program Alerts Buffer Overflow

Description

Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Program Alerts configuration field. Attackers can paste a buffer of 5000 characters into the 'Select or enter a program' field during program alert configuration to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sandboxie Sandboxie

  • 5.30affected

References