Description
iCash 7.6.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload through the Connect to Server dialog. Attackers can paste a 7000-byte string into the Host field and click Connect to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Maxprog | iCash | 7.6.5 | — |
References
- ExploitDB-45388 exploit
- VulnCheck Advisory: iCash 7.6.5 Denial of Service via Connect to Server third-party-advisory