CVE-2021-47781 — Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC)

CVE-2021-47781

Cmder Console Emulator 1.3.18 - 'Cmder.exe' Denial of Service (PoC) PUBLISHED

Description (CNA)

Cmder Console Emulator 1.3.18 contains a buffer overflow vulnerability that allows attackers to trigger a denial of service condition through a maliciously crafted .cmd file. Attackers can create a specially constructed .cmd file with repeated characters to overwhelm the console emulator's buffer and crash the application.

Affected (CNA)

Vendor / product	Versions
Cmder / Cmder Console Emulator	affected 1.3.18

CWE

CWE-787

References

https://www.exploit-db.com/exploits/50401
https://github.com/cmderdev/cmder

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.