| Titolo | SourceCodester Telecom Billing Management System V1.0 Buffer Overflow |
|---|
| Descrizione | In the main program file, there is a variable of type char called name, which receives data using scanf, resulting in the ability to write name data of any length and causing a buffer overflow.
Note: I compiled using Visual Studio 2022 and turned off GS and sdl-
Set a breakpoint on line 229 and start the Visual Studio 2022 debugger. When entering while (1) and inputting data larger than 50 bytes, you will see a buffer overflow in the memory monitoring window. |
|---|
| Fonte | ⚠️ https://github.com/wshRE/CVE/issues/1 |
|---|
| Utente | wsh2023 (UID 81545) |
|---|
| Sottomissione | 22/02/2025 08:46 (1 Anno fa) |
|---|
| Moderazione | 22/02/2025 16:53 (8 hours later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 296567 [SourceCodester Telecom Billing Management System 1.0 Add New Record main.cpp addrecords name/phonenumber buffer overflow] |
|---|
| Punti | 20 |
|---|