Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2019-25559

SpotPaltalk 1.1.5 Name/Key Field Denial of Service

Description

SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK button is clicked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nsauditor SpotPaltalk

  • 1.1.5affected

References