• info
• discussion
• exploit
• solution
• references

DOMJudge Receive Function Remote Buffer Overflow Vulnerability

DOMjudge is prone to a buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied data before copying it to an insufficiently sized memory buffer.

An attacker may exploit this issue by enticing victims into opening a malicious email link.

Successful exploits may allow attackers to execute arbitrary code in the context of the application. Failed attempts may cause denial-of-service conditions.

This issue affects versions of DOMjudge prior to 2.0.0 RC1.