Description
Textpad 8.1.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long buffer string through the Run command interface. Attackers can paste a 5000-byte payload into the Command field via Tools > Run to trigger a buffer overflow that crashes the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Textpad | Textpad | 8.1.2 | — |
References
- ExploitDB-45956 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Textpad 8.1.2 Denial of Service via Run Command third-party-advisory