Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2019-25666

SpotAuditor 3.6.7 Denial of Service Buffer Overflow

Description

SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nsauditor SpotAuditor

  • 3.6.7affected

References