Description
GeoGebra Classic 5.0.631.0-d contains a denial of service vulnerability in the input field that allows attackers to crash the application by sending oversized buffer content. Attackers can generate a large buffer of 800,000 repeated characters and paste it into the 'Entrada:' input field to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| GeoGebra | GeoGebra Classic | 5.0.631.0 | — |
References
- ExploitDB-49654 exploit
- Official Vendor Homepage product
- VulnCheck Advisory: GeoGebra Classic 5.0.631.0-d - Denial of Service third-party-advisory