Description
SpotIM 2.2 contains a denial of service vulnerability that allows attackers to crash the application by inputting a large buffer in the registration name field. Attackers can generate a 1000-character payload and paste it into the 'Name' field to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nsasoft | Nsauditor SpotIM | 2.2 | — |
References
- ExploitDB-47870 exploit
- Vendor Homepage product
- VulnCheck Advisory: SpotIM 2.2 - 'Name' Denial Of Service third-party-advisory