CVE-2018-25242

Impact

One Search 1.1.0.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting excessively long input strings to the search functionality. Attackers can paste a buffer of 950 or more characters into the search bar to trigger an unhandled exception that crashes the application.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://www.exploit-db.com/exploits/46195
• https://www.microsoft.com/store/productId/9PMR5QNS5LTL
• https://www.vulncheck.com/advisories/one-search-denial-of-service