CVE Catalog
CVE-2019-25666
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
SpotAuditor 3.6.7 has a local buffer overflow in the Base64 Password Decoder component. An attacker can supply an oversized Base64 string to crash the application.
Risk Assessment
An attacker can cause a denial of service (DoS) of the application, preventing its operation.
Recommendation
Update SpotAuditor to a newer version if available, or restrict access to the Base64 decoder.
Original NVD description (English source)
SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application. Attackers can supply an oversized Base64 string through the decoder interface to trigger a denial of service condition.