CVE-2020-37140Everest 5.50.2100 - 'Open File' Denial of Service

Description

Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating file open functionality. Attackers can generate a 450-byte buffer of repeated characters and paste it into the file open dialog to trigger an application crash.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• ExploitDB-48259 exploitExploitThird Party AdvisoryVDB Entry
• Archived Product Page vendor-advisoryProduct
• VulnCheck Advisory: Everest 5.50.2100 - 'Open File' Denial of Service third-party-advisoryThird Party Advisory