提出 #441237: SourceCodester Student Record Management System in C++ with Source Code V1.0 Input Buffer Pollution Vulnerability情報

タイトルSourceCodester Student Record Management System in C++ with Source Code V1.0 Input Buffer Pollution Vulnerability
説明In the Student Record Management System program, there is an issue with input buffer pollution. When the program prompts the user to press Enter to continue, any non-Enter characters entered by the user (such as “lll”) are left in the input buffer. Later, when the program reads the option input in the menu, the remaining characters in the buffer are interpreted as menu input values. This leads to the program reading invalid data, causing an infinite loop with the interface continually refreshing. The program does not clear the input buffer before reading the option value, leading to leftover characters from previous inputs affecting subsequent option reads. This issue results from inadequate input validation and improper handling of residual input. This vulnerability affects the user experience, causing the program to enter an infinite loop and obstructing normal functionality.
ソース⚠️ https://github.com/Hacker0xone/CVE/issues/5
ユーザー
 polaris0x1 (UID 67906)
送信2024年11月11日 05:57 (2 年 ago)
モデレーション2024年11月11日 21:23 (15 hours later)
ステータス承諾済み
VulDBエントリ283918 [SourceCodester Student Record Management System 1.0 Main Menu サービス拒否]
ポイント20

Do you know our Splunk app?

Download it now for free!