Description
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsasoft | Nsauditor SpotAuditor | 5.3.2 | — |
References
- ExploitDB-47719 exploit
- Vendor Homepage product
- VulnCheck Advisory: SpotAuditor 5.3.2 - 'Base64' Denial Of Service third-party-advisory