| tiêu đề | Multiple Buffer Overflow Vulnerabilities in SIMPLE COLLEGE MANAGEMENT SYSTEM v1.0 Buffer Overflow |
|---|
| Mô tả | A stack-based buffer overflow vulnerability exists due to the use of the unsafe `gets()` function to read input into fixed-size buffers `name[80]` and `branch[50]`. Since `gets()` does not perform any length checking, inputs exceeding 79 characters for `name` or 49 characters for `branch` will overflow the respective buffers.
This can result in the corruption of adjacent stack variables, including other student records, as well as overwriting the function’s return address or other control flow data. The vulnerability can be exploited to cause a denial of service (DoS) or potentially allow arbitrary code execution through carefully crafted input. |
|---|
| Nguồn | ⚠️ https://github.com/zzzxc643/cve/blob/main/SIMPLE_COLLEGE_MANAGEMENT_SYSTEM.md |
|---|
| Người dùng | zzzxc (UID 81185) |
|---|
| Đệ trình | 28/04/2025 09:03 (cách đây 1 Năm) |
|---|
| Kiểm duyệt | 09/05/2025 13:40 (11 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 308194 [code-projects Simple College Management System 1.0 Add New Student input name/branch tràn bộ đệm] |
|---|
| điểm | 20 |
|---|