Description
Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can create a malicious text file containing 6000 bytes of data and paste it into the User Name and Registration Code field to trigger a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Top-Password | Outlook Password Recovery Denial of Service Exploit | 2.10 | — |
References
- ExploitDB-47309 exploit
- VulnCheck Advisory: Outlook Password Recovery 2.10 Denial of Service Buffer Overflow third-party-advisory