CVE-2016-20050
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
A buffer overflow vulnerability exists in NetSchedScan 1.0 in the Hostname/IP field. A local attacker can supply a crafted payload of 388 bytes followed by a 4-byte EIP overwrite, causing the application to crash.
Risk Assessment
The risk is a local denial of service condition that can disrupt the work of an administrator or other user running NetSchedScan.
Recommendation
Upgrade to a newer version of NetSchedScan if available, or apply security patches. Restrict application access to trusted users only.
Original NVD description (English source)
NetSchedScan 1.0 contains a buffer overflow vulnerability in the scan Hostname/IP field that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a crafted payload containing 388 bytes of data followed by 4 bytes of EIP overwrite into the Hostname/IP field to trigger a denial of service condition.