Description
InfraRecorder 0.53 contains a denial of service vulnerability that allows local attackers to crash the application by importing a maliciously crafted text file. Attackers can create a text file containing 6000 bytes of data and import it through the Edit menu's Import function to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| infrarecorder | InfraRecorder | 0.53 | — |
References
- ExploitDB-45413 exploit
- VulnCheck Advisory: InfraRecorder 0.53 Denial of Service via txt File Import third-party-advisory