Description
Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data into the registration field to trigger a crash when the Register button is clicked.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Recoverlostpassword | Excel Password Recovery Professional | 8.2.0.0 | — |
References
- ExploitDB-46003 exploit
- Official Product Homepage product
- VulnCheck Advisory: Excel Password Recovery Professional 8.2.0.0 Local Buffer Overflow DoS third-party-advisory