Description
QlikView 12.50.20000.0 contains a denial of service vulnerability in the FTP server address input field that allows local attackers to crash the application. Attackers can paste a 300-character buffer into the FTP server address field to trigger an application crash and prevent normal functionality.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QlikTech International AB | QlikView | 12.50.20000.0 | — |
References
- ExploitDB-48732 exploit
- Vendor Homepage product
- VulnCheck Advisory: QlikView 12.50.20000.0 - 'FTP Server Address' Denial of Service third-party-advisory