Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in swnet.dll in YaSoft Switch Off 2.3 and earlier allows remote authenticated users to execute arbitrary code via a long message parameter in a SendMsg action to action.htm.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
YaSoft Switch SendMsg远程缓冲区溢出漏洞
Vulnerability Description
Switch Off是一款简单易用的托盘式系统工具，可自动执行经常使用的操作，如关闭或重启动计算机，关闭拨号连接等。 Switch Off不正确处理用户提交的消息请求，远程攻击者可以利用这个漏洞对服务程序进行缓冲区溢出，精心提交数据可能以SYSTEM进程权限在系统上执行任意指令。 问题存在action.htm脚本中，由于对用户提交给'message'参数的数据缺少正确的边界缓冲区检查，提交超长字符串作为此参数数据，可触发缓冲区溢出，可能以SYSTEM进程权限在系统上执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A