CVE-2019-25340
Denial of Service via Base64 Buffer Overflow in SpotAuditor
Publication date: 2026-02-12
Last updated on: 2026-02-20
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nsasoft | spotauditor | 5.3.2 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-121 | A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in SpotAuditor 5.3.2 is a denial of service issue related to its Base64 decryption feature. Attackers can cause the application to crash by providing an oversized buffer. Specifically, by creating a malformed input file containing 2000 repeated characters and pasting it into the Base64 Encrypted Password field, the application will crash.
How can this vulnerability impact me? :
This vulnerability can impact you by causing the SpotAuditor application to crash, resulting in a denial of service. This means legitimate users may be unable to use the application while it is crashed, potentially disrupting operations that rely on it.
How does this vulnerability affect compliance with common standards and regulations (like GDPR, HIPAA)?:
I don't know
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability can be detected by attempting to reproduce the crash condition in the SpotAuditor 5.3.2 application. Specifically, an attacker can generate a malformed input file containing 2000 repeated characters and paste it into the Base64 Encrypted Password field to trigger the denial of service.
There are no specific network detection commands or signatures provided for this vulnerability.
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include avoiding the use of the Base64 Encrypted Password field with untrusted input, especially inputs that may contain oversized buffers or repeated characters.
Since the vulnerability allows denial of service via malformed input, restricting access to the application and validating or sanitizing inputs before processing can help reduce risk.
Upgrading to a patched version of SpotAuditor, if available, is recommended once released.