Buffer Overflow Vulnerability in Handy Password 4.9.3 Allows Remote Code Execution via Long Title Name Field

Buffer Overflow Vulnerability in Handy Password 4.9.3 Allows Remote Code Execution via Long Title Name Field

CVE-2017-17946 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

A buffer overflow in Handy Password 4.9.3 allows remote attackers to execute arbitrary code via a long "Title name" field in "mail box" data that is mishandled in an "Open from mail box" action.

Learn more about our Web Application Penetration Testing UK.