Description
SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an excessively long string. Attackers can paste a buffer of 1000 characters into the Name/Key field during registration to trigger a crash when the OK button is clicked.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsauditor | SpotPaltalk | 1.1.5 | — |
References
- ExploitDB-46822 exploit
- Official Product Homepage product
- VulnCheck Advisory: SpotPaltalk 1.1.5 Name/Key Field Denial of Service third-party-advisory