Vulnerability CVE-2021-27723
Published: 2021-11-02

Description:
An issue was discovered in Nsasoft US LLC Product Key Explorer 4.2.7. The program can be crashed by entering 300 bytes char data into the "Key" or "Name" field while registering.

Type:

CWE-120

 (Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'))

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
Nsasoft -> Product key explorer 

 References:
https://www.exploit-db.com/exploits/49590
https://www.exploit-db.com/exploits/49638
Copyright 2024, cxsecurity.com

 

Back to Top