Skip to content
CVE PROGRAM SOURCE RECORD4.6 Medium

CVE-2020-37215

MSN Password Recovery 1.30 - Denial of Service

Description

MSN Password Recovery version 1.30 contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized input in the registration code field. Attackers can generate a 9000-byte buffer of repeated characters and paste it into the 'User Name and Registration Code' field to trigger an application crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Top Password Software MSN Password Recovery

  • 1.30affected

References