CVE-2023-52277

Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clicks on Test Connection. This occurs during SecureGatewayHost object processing in RAPortCheck.createNWConnection.
Configurations

Configuration 1 (hide)

cpe:2.3:a:royalapps:royaltsx:*:*:*:*:*:macos:*:*

History

21 Nov 2024, 08:39

Type Values Removed Values Added
References () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5788.php - Third Party Advisory () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5788.php - Third Party Advisory

10 Jan 2024, 20:58

Type Values Removed Values Added
References () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5788.php - () https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5788.php - Third Party Advisory
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.8
CWE CWE-787
CPE cpe:2.3:a:royalapps:royaltsx:*:*:*:*:*:macos:*:*
Summary
  • (es) Royal RoyalTSX anterior a 6.0.2.1 permite a los atacantes causar una denegación de servicio (daños en la memoria del montón y caída de la aplicación) o posiblemente tener otro impacto no especificado a través de un nombre de host largo en un archivo RTSZ, si la víctima hace clic en Test Connection. Esto ocurre durante el procesamiento del objeto SecureGatewayHost en RAPortCheck.createNWConnection.
First Time Royalapps
Royalapps royaltsx

31 Dec 2023, 03:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-12-31 03:15

Updated : 2024-11-21 08:39


NVD link : CVE-2023-52277

Mitre link : CVE-2023-52277

CVE.ORG link : CVE-2023-52277


JSON object : View

Products Affected

royalapps

  • royaltsx
CWE
CWE-787

Out-of-bounds Write