Description
Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a search operation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| EcoSearch | Eco Search | 1.0.2.0 | — |
References
- ExploitDB-46196 exploit
- Product Reference product
- VulnCheck Advisory: Eco Search 1.0.2.0 Denial of Service third-party-advisory