CVE-2020-37140Everest 5.50.2100 - 'Open File' Denial of Service

Descripción

Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating file open functionality. Attackers can generate a 450-byte buffer of repeated characters and paste it into the file open dialog to trigger an application crash.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• ExploitDB-48259 exploitExploitThird Party AdvisoryVDB Entry
• Archived Product Page vendor-advisoryProduct
• VulnCheck Advisory: Everest 5.50.2100 - 'Open File' Denial of Service third-party-advisoryThird Party Advisory