Описание
SHAREit through 4.0.6.177 does not check the full message length from the received packet header (which is used to allocate memory for the next set of data). This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941.
Ссылки
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.0.6.177 (включая)
cpe:2.3:a:ushareit:shareit:*:*:*:*:*:windows:*:*
EPSS
Процентиль: 58%
0.00367
Низкий
7.5 High
CVSS3
7.8 High
CVSS2
Дефекты
CWE-770
Связанные уязвимости
CVSS3: 7.5
github
больше 3 лет назад
SHAREit through 4.0.6.177 does not check the full message length from the received packet header (which is used to allocate memory for the next set of data). This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941.
EPSS
Процентиль: 58%
0.00367
Низкий
7.5 High
CVSS3
7.8 High
CVSS2
Дефекты
CWE-770