Executive Summary

This vulnerability exists in Fathom 2.4 and is a buffer overflow issue in the Authorization Code field. It allows local attackers to crash the application by submitting an input string that is too large. Specifically, an attacker can paste a 6000-byte payload into the Authorization Code field and activate it, which triggers a denial of service condition.

Useful 0 Not Useful 0

Impact Analysis

The primary impact of this vulnerability is a denial of service (DoS) condition. An attacker with local access can cause the application to crash by submitting an oversized input to the Authorization Code field, potentially disrupting normal operations and availability of the application.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability involves a buffer overflow triggered by submitting an oversized input string (around 6000 bytes) into the Authorization Code field of the Fathom 2.4 application. Detection would involve monitoring for unusually large input submissions to this field or application crashes related to such inputs.

Since the vulnerability is local and triggered by user input within the application, network-based detection commands are not applicable. Instead, detection can be done by testing the application locally with input validation or by monitoring application logs for crashes after large inputs.

No specific commands are provided in the available information.

Useful 0 Not Useful 0

Mitigation Strategies

Immediate mitigation steps include preventing users from submitting oversized input strings to the Authorization Code field in the Fathom 2.4 application.

Applying input validation to limit the size of the Authorization Code field input can help avoid triggering the buffer overflow.

Additionally, restricting access to the application to trusted users only, since the vulnerability requires local interaction, can reduce risk.

No patches or updates are mentioned in the provided information.

Useful 0 Not Useful 0