CVE-2020-37140

Summary

Everest, later referred to as AIDA64, 5.50.2100 contains a denial of service vulnerability that allows local attackers to crash the application by manipulating file open functionality. Attackers can generate a 450-byte buffer of repeated characters and paste it into the file open dialog to trigger an application crash.

Affected Software

Weaknesses

• CWE-787: Out-of-bounds Write

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://www.exploit-db.com/exploits/48259
• https://web.archive.org/web/20191223010612/https://www.aida64.com/
• https://www.vulncheck.com/advisories/everest-open-file-denial-of-service

• ←Previous
• Next→