Description
GSearch 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by inputting an excessively long string in the search bar. Attackers can paste a buffer of 2000 characters into the search field, click search, and select any result to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GSearch | GSearch | 1.0.1.0 | — |
References
- ExploitDB-47026 exploit
- Product Reference product
- VulnCheck Advisory: GSearch 1.0.1.0 Denial of Service via Search Input third-party-advisory