CVE-2018-25238
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk5th percentile - higher than 5% of all known CVEs
Summary
VSCO version 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by pasting a 5000-character string into the search bar and navigating back.
Risk Assessment
The risk is that a local user can intentionally crash the VSCO application, potentially causing loss of unsaved data or disrupting workflow.
Recommendation
It is recommended to update VSCO to the latest version, which includes a fix limiting the input length in the search field.
Original NVD description (English source)
VSCO 1.1.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string through the search functionality. Attackers can paste a buffer of 5000 characters into the search bar and navigate back to trigger an application crash.