CVE-2020-37130
HighSummary
Nsauditor version 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.
Risk Assessment
This vulnerability may lead to application downtime, affecting service availability for users. It could result in loss of user trust and potential financial losses.
Recommendation
It is recommended to update Nsauditor to the latest version to mitigate this vulnerability. Additionally, implementing input validation for the registration name field can help prevent malicious payloads.
Other vulnerabilities in Nsauditor 3.2.0.0
See all- CVE-2018-25213High
Nsauditor version 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool.
- CVE-2021-47815High
Nsauditor version 3.2.3 contains a denial of service vulnerability in the registration code input field that allows attackers to crash the application. Attackers can paste a large buffer of 256 repeated characters into the 'Key' field to trigger an application crash.
Original NVD description (English source)
Nsauditor 3.2.0.0 contains a denial of service vulnerability in the registration name input field that allows attackers to crash the application. Attackers can create a malicious payload of 1000 bytes of repeated characters to trigger an application crash when pasted into the registration name field.