Description
ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.
Problem types
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Product status
Credits
Ismail Tasdelen
References
www.exploit-db.com/exploits/47859 (ExploitDB-47859)
www.nsauditor.com/ (Vendor Homepage)
www.vulncheck.com/...rk-access-control-key-denial-of-service (VulnCheck Advisory: ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service)