CVE-2019-25476 | BDVDB-2026-319749 Detail
Top-PasswordOutlook Password Recovery Denial of Service Exploit
Description#
Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can create a malicious text file containing 6000 bytes of data and paste it into the User Name and Registration Code field to trigger a denial of service condition.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: local.
Weaknesses#
- CWE-787 Out-of-bounds Write
References#
Exploit#
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.