| 제목 | Multiple Buffer Overflow Vulnerabilities in SIMPLE COLLEGE MANAGEMENT SYSTEM v1.0 Buffer Overflow |
|---|
| 설명 | A stack-based buffer overflow vulnerability exists due to the use of the unsafe `gets()` function to read input into fixed-size buffers `name[80]` and `branch[50]`. Since `gets()` does not perform any length checking, inputs exceeding 79 characters for `name` or 49 characters for `branch` will overflow the respective buffers.
This can result in the corruption of adjacent stack variables, including other student records, as well as overwriting the function’s return address or other control flow data. The vulnerability can be exploited to cause a denial of service (DoS) or potentially allow arbitrary code execution through carefully crafted input. |
|---|
| 원천 | ⚠️ https://github.com/zzzxc643/cve/blob/main/SIMPLE_COLLEGE_MANAGEMENT_SYSTEM.md |
|---|
| 사용자 | zzzxc (UID 81185) |
|---|
| 제출 | 2025. 04. 28. AM 09:03 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 05. 09. PM 01:40 (11 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 308194 [code-projects Simple College Management System 1.0 Add New Student input name/branch 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|