CVE-2020-36943

Impact

aSc TimeTables 2021.6.2 contains a denial of service vulnerability that allows attackers to crash the application by overwriting subject title fields with excessive data. Attackers can generate a 10,000-character buffer and paste it into the subject title to trigger application instability and potential crash.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

Weakness classification

References

• NVD record
• CVE.org record
• https://www.asctimetables.com/#!/home
• https://www.asctimetables.com/#!/home/download
• https://www.exploit-db.com/exploits/49147
• https://www.vulncheck.com/advisories/asc-timetables-denial-of-service
• https://www.exploit-db.com/exploits/49147