| Titre | MOVIE TICKET BOOKING SYSTEM stack overflow in insert_details function v1.0 Buffer Overflow |
|---|
| Description | The code reads user input using the insecure `form scanf("%s", buffer).`All target buffer sizes are fixed at 20 bytes (including terminating null characters)
An attacker can input a string of more than 19 characters, resulting in:
- Adjacent memory data is overwritten
- Program control flows can be hijacked
- Sensitive data breaches |
|---|
| La source | ⚠️ https://github.com/zzzxc643/cve/blob/main/MOVIE_TICKET_BOOKING_SYSTEM.md |
|---|
| Utilisateur | zzzxc (UID 81185) |
|---|
| Soumission | 16/04/2025 14:48 (il y a 1 Année) |
|---|
| Modérer | 29/04/2025 07:20 (13 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 306505 [code-projects Simple Movie Ticket Booking System 1.0 changeprize buffer overflow] |
|---|
| Points | 19 |
|---|