Description
Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the custom log files location field. Attackers can input a buffer of 2000 characters in the Log Files Location custom path parameter to trigger a crash when the OK button is clicked.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Messenger | Softros LAN Messenger | 9.2 | — |
References
- ExploitDB-45781 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Softros LAN Messenger 9.2 Denial of Service via Log Files Location third-party-advisory