| शीर्षक | Uncontrolled Memory Allocation on ShareIt 4.0.6.177 for Windows |
|---|
| विवरण | A vulnerability classified as problematic has been found in ShareIt x.x.x.x for Windows. This affects the unsecured and secured channel for file transfers. A specially crafted packet can be sent to instruct the application to allocate an arbitrary memory size. CWE is classifying the issue as CWE-789 . This is going to have an impact on availability. An attacker might be able to exploit the vulnerability by sending a malicious packet to theoretically allocate memory of up to 2 GB while the application is running affecting the resources of the host.
This vulnerability is uniquely identified as CVE-2019-14941 for the unsecured channel and CVE-2019-15234 for the secured channel. It is possible to initiate the attack in a logically adjacent network. No authentication is needed for exploitation.
A public exploit is shared for download at github.com (https://github.com/nathunandwani/shareit-cwe-789). It is declared as proof-of-concept. No patch is available from the vendor. It is recommended to close the application when not in use. |
|---|
| स्रोत | ⚠️ https://github.com/nathunandwani/shareit-cwe-789 |
|---|
| उपयोगकर्ता | nathunandwani (UID 862) |
|---|
| सबमिशन | 24/04/2020 07:22 PM (6 साल पहले) |
|---|
| संयम | 28/04/2020 10:02 AM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 154420 [SHAREit तक 4.0.6.177 Message Length Packet सेवा अस्वीकार] |
|---|
| अंक | 20 |
|---|