CVE-2018-25243
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.
Risk Assessment
The risk is that a local attacker can crash the application, leading to service disruption and potential data loss or unavailability for users.
Recommendation
It is recommended to update FastTube to the latest version that includes a fix limiting the length of input strings in the search functionality, or manually implement input validation.
Original NVD description (English source)
FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.