Description
Cobian Reflector 0.9.93 RC1 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the password input field. Attackers can paste a large 8000-byte buffer into the password field to trigger an application crash during SFTP task configuration.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cobiansoft | Cobian Reflector | 0.9.93 | — |
References
- ExploitDB-50789 exploit
- Cobian Software Official Homepage product
- VulnCheck Advisory: Cobian Reflector 0.9.93 RC1 Local Denial of Service via Password Field third-party-advisory