Description
Drive Power Manager 1.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a 6000-byte payload into the Name field and click Register to trigger a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hdtune | Drive Power Manager | 1.10 | — |
References
- ExploitDB-45299 exploit
- Official Product Homepage product
- VulnCheck Advisory: Drive Power Manager 1.10 Denial of Service via Name Field third-party-advisory