Description (CNA)
Yasr 0.6.9-5 contains a buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized argument to the -p parameter. Attackers can invoke yasr with a crafted payload containing junk data, shellcode, and a return address to overwrite the stack and trigger code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| yasr / Yasr Screen Reader | affected 0.6.9-5 |
CWE
CWE-22
References
- https://www.exploit-db.com/exploits/39734
- http://yasr.sourceforge.net/
- https://www.vulncheck.com/advisories/yasr-5-buffer-overflow-via-command-line-parameter
ADP enrichment
No English description supplied.
No references supplied.