CVE-2021-27722

An issue was discovered in Nsasoft US LLC SpotAuditor 5.3.5. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.
References
Link Resource
https://www.exploit-db.com/exploits/49590 Not Applicable Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/49638 Not Applicable Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/49590 Not Applicable Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/49638 Not Applicable Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

cpe:2.3:a:nsasoft:spotauditor:5.3.5:*:*:*:*:*:*:*

History

21 Nov 2024, 05:58

Type Values Removed Values Added
References () https://www.exploit-db.com/exploits/49590 - Not Applicable, Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/49590 - Not Applicable, Third Party Advisory, VDB Entry
References () https://www.exploit-db.com/exploits/49638 - Not Applicable, Third Party Advisory, VDB Entry () https://www.exploit-db.com/exploits/49638 - Not Applicable, Third Party Advisory, VDB Entry

Information

Published : 2021-11-02 11:15

Updated : 2024-11-21 05:58


NVD link : CVE-2021-27722

Mitre link : CVE-2021-27722

CVE.ORG link : CVE-2021-27722


JSON object : View

Products Affected

nsasoft

  • spotauditor
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')