This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2018-25244 | BDVDB-2026-324765 Detail

EcoSearchEco Search

Description#

Eco Search 1.0.2.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar and trigger a crash by initiating a search operation.

Impact#

Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: local.

Weaknesses#

  • CWE-1312 Missing Protection for Mirrored Regions in On-Chip Fabric Firewall

References#

Exploit#

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.