{"id":"CVE-2021-47972","state":"PUBLISHED","title":"Sticky Notes & Color Widgets 1.4.2 Denial of Service","description":"Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding.","publishedAt":"2026-05-16T15:26:12.858Z","updatedAt":"2026-05-18T17:53:20.663Z","severity":{"score":8.7,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["sticky-notes-color-widgets Sticky Notes Color Widgets"],"affected":[{"vendor":"sticky-notes-color-widgets","product":"Sticky Notes Color Widgets","versions":[{"version":"1.4.2","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/49957","https://www.vulncheck.com/advisories/sticky-notes-color-widgets-denial-of-service"],"weaknesses":["CWE-789"],"ingestedAt":"2026-10-29T19:49:19.404Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2021/47xxx/CVE-2021-47972.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2021-47972","state":"PUBLISHED","datePublished":"2026-05-16T15:26:12.858Z","dateUpdated":"2026-05-18T17:53:20.663Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-05-16T14:31:35.596Z"},"containers":{"cna":{"title":"Sticky Notes & Color Widgets 1.4.2 Denial of Service","descriptions":[{"lang":"en","value":"Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can paste large payloads of repeated characters into note fields to trigger application crashes and make the application stop responding."}],"affected":[{"vendor":"sticky-notes-color-widgets","product":"Sticky Notes Color Widgets","versions":[{"version":"1.4.2","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/49957","name":"ExploitDB-49957","tags":["exploit"]},{"url":"https://www.vulncheck.com/advisories/sticky-notes-color-widgets-denial-of-service","name":"VulnCheck Advisory: Sticky Notes & Color Widgets 1.4.2 Denial of Service","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"NETWORK","baseScore":8.7,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"NONE","vulnIntegrityImpact":"NONE","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":7.5,"baseSeverity":"HIGH","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-789","lang":"en","description":"Memory Allocation with Excessive Size Value","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-05-16T15:26:12.858Z"},"datePublic":"2021-04-06T00:00:00.000Z","credits":[{"lang":"en","value":"Geovanni Ruiz","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-18T17:20:21.920977Z","id":"CVE-2021-47972","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-18T17:53:20.663Z"}}]}}}