Description
TaskCanvas 1.4.0 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can generate a 1000-character buffer payload and paste it into the registration field to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DigitalVolcano Software | TaskCanvas | 1.4.0 | — |
References
- ExploitDB-47911 exploit
- Vendor Homepage product
- TaskCanvas Software Download Page product
- VulnCheck Advisory: TaskCanvas 1.4.0 - 'Registration' Denial Of Service third-party-advisory