CVE-2019-25340
HIGHSpotAuditor 5.3.2 - Denial of Service via Base64 Decryption Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25340. PoCs published by ZwX.
AI-analyzed exploit summary This PoC exploits a denial-of-service vulnerability in SpotAuditor 5.3.2 by crafting a malformed Base64 input with a large buffer of 'A' characters. The exploit triggers a crash when the input is processed by the 'Base64 Encrypted Password' decryption feature.
Description
SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to crash the application by supplying an oversized buffer. Attackers can generate a malformed input file with 2000 repeated characters to trigger an application crash when pasted into the Base64 Encrypted Password field.
Exploits (1)
This PoC exploits a denial-of-service vulnerability in SpotAuditor 5.3.2 by crafting a malformed Base64 input with a large buffer of 'A' characters. The exploit triggers a crash when the input is processed by the 'Base64 Encrypted Password' decryption feature.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N