| Titel | MOVIE TICKET BOOKING SYSTEM stack overflow in insert_details function v1.0 Buffer Overflow |
|---|
| Beschreibung | The code reads user input using the insecure `form scanf("%s", buffer).`All target buffer sizes are fixed at 20 bytes (including terminating null characters)
An attacker can input a string of more than 19 characters, resulting in:
- Adjacent memory data is overwritten
- Program control flows can be hijacked
- Sensitive data breaches |
|---|
| Quelle | ⚠️ https://github.com/zzzxc643/cve/blob/main/MOVIE_TICKET_BOOKING_SYSTEM.md |
|---|
| Benutzer | zzzxc (UID 81185) |
|---|
| Einreichung | 16.04.2025 14:48 (vor 1 Jahr) |
|---|
| Moderieren | 29.04.2025 07:20 (13 days later) |
|---|
| Status | Akzeptiert |
|---|
| VulDB Eintrag | 306505 [code-projects Simple Movie Ticket Booking System 1.0 changeprize Pufferüberlauf] |
|---|
| Punkte | 19 |
|---|