PT-2026-35243 · Undefined · Undefined

Publicado 2026-04-26 · Atualizado 2026-04-26 · CVE-2018-25273

NVD

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CrossFont 7.5 contains a buffer overflow vulnerability that allows local attackers to crash the application by submitting an oversized payload in the License Key field. Attackers can generate a malicious file containing 4000 bytes of data, paste it into the License Key input field, and trigger an application crash when processing the input.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2018-25273

Produtos afetados

Undefined

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-25273 · Nota de Segurança
• https://exploit-db.com/exploits/45494 · Nota
• https://vulncheck.com/advisories/crossfont-denial-of-service-via-license-key-field · Nota