Description
CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input during the upload process to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cewe-Photoworld | CEWE PHOTO SHOW | 6.4.3 | — |
References
- ExploitDB-46861 exploit
- Official Product Homepage product
- VulnCheck Advisory: CEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field third-party-advisory