| タイトル | Multiple Buffer Overflow Vulnerabilities in SIMPLE COLLEGE MANAGEMENT SYSTEM v1.0 Buffer Overflow |
|---|
| 説明 | A stack-based buffer overflow vulnerability exists due to the use of the unsafe `gets()` function to read input into fixed-size buffers `name[80]` and `branch[50]`. Since `gets()` does not perform any length checking, inputs exceeding 79 characters for `name` or 49 characters for `branch` will overflow the respective buffers.
This can result in the corruption of adjacent stack variables, including other student records, as well as overwriting the function’s return address or other control flow data. The vulnerability can be exploited to cause a denial of service (DoS) or potentially allow arbitrary code execution through carefully crafted input. |
|---|
| ソース | ⚠️ https://github.com/zzzxc643/cve/blob/main/SIMPLE_COLLEGE_MANAGEMENT_SYSTEM.md |
|---|
| ユーザー | zzzxc (UID 81185) |
|---|
| 送信 | 2025年04月28日 09:03 (1 年 ago) |
|---|
| モデレーション | 2025年05月09日 13:40 (11 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 308194 [code-projects Simple College Management System 1.0 Add New Student input name/branch メモリ破損] |
|---|
| ポイント | 20 |
|---|