Description
SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can paste a buffer of 300 repeated characters into the Name input during registration to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsauditor | SpotAuditor | 5.2.6 | — |
References
- ExploitDB-46778 exploit
- Product Reference product
- VulnCheck Advisory: SpotAuditor 5.2.6 Name Field Denial of Service third-party-advisory