| Название | Multiple Buffer Overflow Vulnerabilities in SIMPLE COLLEGE MANAGEMENT SYSTEM v1.0 Buffer Overflow |
|---|
| Описание | A stack-based buffer overflow vulnerability exists due to the use of the unsafe `gets()` function to read input into fixed-size buffers `name[80]` and `branch[50]`. Since `gets()` does not perform any length checking, inputs exceeding 79 characters for `name` or 49 characters for `branch` will overflow the respective buffers.
This can result in the corruption of adjacent stack variables, including other student records, as well as overwriting the function’s return address or other control flow data. The vulnerability can be exploited to cause a denial of service (DoS) or potentially allow arbitrary code execution through carefully crafted input. |
|---|
| Источник | ⚠️ https://github.com/zzzxc643/cve/blob/main/SIMPLE_COLLEGE_MANAGEMENT_SYSTEM.md |
|---|
| Пользователь | zzzxc (UID 81185) |
|---|
| Представление | 28.04.2025 09:03 (1 Год назад) |
|---|
| Модерация | 09.05.2025 13:40 (11 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 308194 [code-projects Simple College Management System 1.0 Add New Student input name/branch повреждение памяти] |
|---|
| Баллы | 20 |
|---|