CVE-2021-47798
BaseFortify
Publication date: 2026-01-16
Last updated on: 2026-01-16
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| noteburner | noteburner | 2.35 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-120 | The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a buffer overflow in NoteBurner version 2.35 that occurs in the license code input fields ('Name' and 'Code'). An attacker can create a specially crafted payload of about 6000 bytes and paste it into these fields, causing the application to crash. The issue arises because the software does not properly check the size of the input before copying it, leading to a buffer overflow condition. [2, 3]
How can this vulnerability impact me? :
The vulnerability can cause a denial of service (DoS) by crashing the NoteBurner application when the malicious payload is input into the license code fields. This impacts the availability of the application but does not affect confidentiality or integrity. An attacker with local access and requiring user interaction can exploit this to disrupt the normal operation of the software. [2, 3]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by attempting to reproduce the crash condition on the NoteBurner 2.35 application. Specifically, generate a payload of approximately 6000 bytes (e.g., a string of 6000 'A' characters), then paste this payload into the 'Name' and 'Code' license input fields of the application. If the application crashes, the vulnerability is present. A proof-of-concept involves creating a file with 6000 'A's, copying its content, and pasting it into the license fields. There are no specific network detection commands since this is a local application vulnerability requiring user interaction. [3]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include avoiding pasting or entering excessively long input (around 6000 bytes) into the 'Name' and 'Code' license fields of NoteBurner 2.35. Since the vulnerability requires local user interaction, restricting access to the application and ensuring only trusted users can operate it can reduce risk. Additionally, monitor for updates or patches from the vendor to fix the buffer overflow issue. [2, 3]
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
The vulnerability causes a denial of service by crashing the application due to a buffer overflow in the license code input fields. It impacts availability but does not affect confidentiality or integrity. There is no information indicating a direct effect on compliance with standards like GDPR or HIPAA. [2, 3]