CVE-2019-25667
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields. Attackers can paste excessively long strings into the 'New User Name' or 'New Serial Number' textboxes, causing a denial of service.
Risk Assessment
The risk is a local denial of service, which can disrupt application functionality and impact user productivity.
Recommendation
Upgrade to a newer version of TaskInfo if available, or restrict application access to trusted users only.
Original NVD description (English source)
TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields. Attackers can paste excessively long strings into the New User Name or New Serial Number textboxes in the Help menu's registration dialog to trigger a denial of service condition.