| Package | Affected versions | Patched versions |
|---|---|---|
| nsauditor | < 3.2.7 | 3.2.7 |
Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free