CVE-2019-25552

Name of the Vulnerable Software and Affected Versions CEWE PHOTO SHOW version 6.4.3

Description CEWE PHOTO SHOW 6.4.3 has a denial of service issue. Attackers can crash the application by sending an excessively long buffer to the password field. Specifically, pasting a large string of repeated characters into the password input during the upload process triggers an application crash.

Recommendations Update to a newer version that contains a fix for this vulnerability. As a temporary workaround, limit the length of the input accepted by the password field.