Description
NetAware 1.20 contains a buffer overflow vulnerability in the User Blocking feature that allows local attackers to crash the application by supplying oversized input. Attackers can paste a malicious buffer of 512 bytes into the 'Add a website or keyword to be filtered' field and trigger a crash when removing the created block.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Infiltration-Systems | NetAware | 1.20 | — |
References
- ExploitDB-46908 exploit
- Official Product Homepage product
- VulnCheck Advisory: NetAware 1.20 Denial of Service via Add Block Buffer Overflow third-party-advisory