vendor:
Project64
by:
Gionathan Reale
7.8
CVSS
HIGH
Denial Of Service
400
CWE
Product Name: Project64
Affected Version From: 2.3.2
Affected Version To: 2.3.2
Patch Exists: NO
Related CWE: N/A
CPE: a:project64:project64:2.3.2
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 7 32-bit
2018
Project64 2.3.2 – Denial Of Service (PoC)
Project64 2.3.2 is vulnerable to a denial of service attack when a maliciously crafted payload is pasted into the 'Plugin Directory' field in the 'Options' > 'Settings' > 'Directories' menu. This causes the application to crash.
Mitigation:
Ensure that user input is properly validated and sanitized before being used in the application.