vendor:
NordVPN
by:
Alejandra Sánchez
7.5
CVSS
HIGH
Denial of Service
119
CWE
Product Name: NordVPN
Affected Version From: 6.19.6
Affected Version To: 6.19.6
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 10
2019
NordVPN 6.19.6 – Denial of Service (PoC)
A denial of service vulnerability exists in NordVPN 6.19.6 due to a buffer overflow when copying a large amount of data to the 'E-mail' field. An attacker can exploit this vulnerability by creating a file containing a large amount of data and copying it to the 'E-mail' field, resulting in a denial of service condition.
Mitigation:
Upgrade to the latest version of NordVPN to mitigate this vulnerability.
