Description
Flexsense DiskBoss 7.7.14 contains a local buffer overflow vulnerability in the 'Input Directory' component that allows unauthenticated attackers to execute arbitrary code on the system. Attackers can exploit this by pasting a specially crafted directory path into the 'Add Input Directory' field.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Flexsense DiskBoss
Default version status: unaffected
7.7.14affected
References
- https://www.exploit-db.com/exploits/48279 ↗
- https://www.diskboss.com/ ↗
- https://github.com/x00x00x00x00/diskboss_7.7.14/raw/master/diskboss_setup_v7.7.14.exe ↗
- https://github.com/x00x00x00x00/diskboss_7.7.14/raw/master/ ↗
- https://www.vulncheck.com/advisories/flexsense-diskboss-add-input-directory-buffer-overflow ↗