| Titre | Multiple Buffer Overflow Vulnerabilities in SIMPLE COLLEGE MANAGEMENT SYSTEM v1.0 Buffer Overflow |
|---|
| Description | A stack-based buffer overflow vulnerability exists due to the use of the unsafe `gets()` function to read input into fixed-size buffers `name[80]` and `branch[50]`. Since `gets()` does not perform any length checking, inputs exceeding 79 characters for `name` or 49 characters for `branch` will overflow the respective buffers.
This can result in the corruption of adjacent stack variables, including other student records, as well as overwriting the function’s return address or other control flow data. The vulnerability can be exploited to cause a denial of service (DoS) or potentially allow arbitrary code execution through carefully crafted input. |
|---|
| La source | ⚠️ https://github.com/zzzxc643/cve/blob/main/SIMPLE_COLLEGE_MANAGEMENT_SYSTEM.md |
|---|
| Utilisateur | zzzxc (UID 81185) |
|---|
| Soumission | 28/04/2025 09:03 (il y a 1 Année) |
|---|
| Modérer | 09/05/2025 13:40 (11 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 308194 [code-projects Simple College Management System 1.0 Add New Student input name/branch buffer overflow] |
|---|
| Points | 20 |
|---|