Description
ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the application by providing an oversized input in the Enter Key field. Attackers can generate a 256-byte buffer of repeated 'A' characters to trigger an application crash when pasting the malicious content.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Northwest Performance Software | ipPulse | 1.92 | — |
References
- ExploitDB-47674 exploit
- Vendor Homepage product
- VulnCheck Advisory: ipPulse 1.92 - 'Enter Key' Denial of Service third-party-advisory