Exploitation Summary
EIP tracks 2 public exploits for CVE-2021-27722. PoCs published by Sinem Şahin, Enes Özeser.
AI-analyzed exploit summary This exploit generates a payload file containing a buffer of 300 'A' characters to trigger a denial of service in Product Key Explorer 4.2.7 when pasted into the registration code field. The PoC is straightforward and demonstrates a crash via buffer overflow.
Description
An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.
Exploits (2)
This exploit generates a payload file containing a buffer of 300 'A' characters to trigger a denial of service in Product Key Explorer 4.2.7 when pasted into the registration code field. The PoC is straightforward and demonstrates a crash via buffer overflow.
This exploit is a proof-of-concept for a denial-of-service vulnerability in Nsasoft Hardware Software Inventory 1.6.4.0. It generates a payload file containing a buffer of 300 'A' characters, which when pasted into the 'Key' or 'Name' field during registration, causes the application to crash.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H