CVE-2021-47781

Summary

Cmder Console Emulator 1.3.18 contains a buffer overflow vulnerability that allows attackers to trigger a denial of service condition through a maliciously crafted .cmd file. Attackers can create a specially constructed .cmd file with repeated characters to overwhelm the console emulator's buffer and crash the application.

Affected Software

Weaknesses

• CWE-787: Out-of-bounds Write

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/50401
• https://github.com/cmderdev/cmder

• ←Previous
• Next→