CVE-2019-25666
Local Buffer Overflow in SpotAuditor Base64 Decoder Causes DoS
Publication date: 2026-04-05
Last updated on: 2026-04-20
Assigner: VulnCheck
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| nsasoft | spotauditor | to 3.6.7 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
SpotAuditor version 3.6.7 has a local buffer overflow vulnerability in its Base64 Password Decoder component. This means that the software does not properly handle oversized Base64 strings supplied to the decoder, which can cause the application to crash.
An attacker can exploit this by providing an excessively large Base64 string through the decoder interface, triggering a denial of service condition.
How can this vulnerability impact me? :
This vulnerability can lead to a denial of service (DoS) condition by crashing the SpotAuditor application when an attacker supplies an oversized Base64 string.
As a result, legitimate users may be unable to use the application while it is crashed, potentially disrupting operations that depend on SpotAuditor.