CVE-2018-25232 Softros LAN Messenger 9.2 Denial of Service via Log Files Location
MediumCVSS 6.8
EPSS 0.27%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the custom log files location field. Attackers can input a buffer of 2000 characters in the Log Files Location custom path parameter to trigger a crash when the OK button is clicked.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| softros lan messenger | <= 9.2 | No fix listed |
| Messenger Softros LAN Messenger | = 9.2 | No fix listed |
References
- Official Product Homepage product
- Product Reference product
- ExploitDB-45781 exploit vdb-entry
- VulnCheck Advisory: Softros LAN Messenger 9.2 Denial of Service via Log Files Location third-party-advisory