Description
aSc TimeTables 2021.6.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting subject title fields with excessive data. Attackers can generate a 10,000-character buffer and paste it into the subject title to trigger application instability and potential crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| asc Applied Software Consultants, s.r.o. | asc Timetables | 2021.6.2 | — |
References
- ExploitDB-49147 exploit
- Vendor Homepage product
- Software Download Page product
- VulnCheck Advisory: aSc TimeTables 2021.6.2 - Denial of Service third-party-advisory