| 标题 | Department Store Management System stack overflow in bill function v1.0 Buffer Overflow |
|---|
| 描述 | The `bill()` function contains a **buffer overflow vulnerability** due to unsafe usage of `scanf("%s", x)` with a fixed-size buffer `char x[4]`. This allows an attacker to overwrite adjacent memory, potentially leading to **arbitrary code execution (RCE)** or **denial-of-service (DoS)**. |
|---|
| 来源 | ⚠️ https://github.com/zzzxc643/cve/blob/main/Department_Store_Management_System.md |
|---|
| 用户 | zzzxc (UID 81185) |
|---|
| 提交 | 2025-04-28 08時17分 (1 年前) |
|---|
| 管理 | 2025-05-08 21時22分 (11 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 308094 [code-projects Departmental Store Management System 1.0 bill Item Code 内存损坏] |
|---|
| 积分 | 18 |
|---|