CVE-2019-25552
HIGHCEWE PHOTO SHOW 6.4.3 Denial of Service via Password Field
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25552. PoCs published by Alejandra Sánchez.
AI-analyzed exploit summary This Python script generates a buffer overflow payload (5000 'A' characters) to trigger a DoS in CEWE PHOTO SHOW 6.4.3 by pasting the content into the 'Password' field during upload. The exploit is straightforward and relies on a simple buffer overflow to crash the application.
Description
CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field. Attackers can paste a large string of repeated characters into the password input during the upload process to trigger an application crash.
Exploits (1)
This Python script generates a buffer overflow payload (5000 'A' characters) to trigger a DoS in CEWE PHOTO SHOW 6.4.3 by pasting the content into the 'Password' field during upload. The exploit is straightforward and relies on a simple buffer overflow to crash the application.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N