Description
TransMac 12.3 contains a buffer overflow vulnerability in the volume name field that allows local attackers to crash the application by supplying an excessively long string. Attackers can create a malicious file with 1000 repeated characters, paste the content into the volume name field during disk image creation, and trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acutesystems | TransMac | 12.3 | — |
References
- ExploitDB-46470 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: TransMac 12.3 Denial of Service via Volume Name Field third-party-advisory