5.5Mittel

CVE-2020-37140Everest 5.50.2100 - 'Open File' Denial of Service

FinalWire Everest Veröffentlicht: (vor 9 Monaten)

Beschreibung

Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating file open functionality. Attackers can generate a 450-byte buffer of repeated characters and paste it into the file open dialog to trigger an application crash.

Schwachstellentyp (CWE): CWE-787

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
aida64 aida64 5.50.2100
FinalWire Everest 5.50.2100
linuxfoundation everest 5.50.2100

Referenzen und Patches

CPE-Treffer (NVD) (1)

  • cpe:2.3:a:aida64:aida64:5.50.2100:*:*:*:-:*:*:*