A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Affected by this issue is the function addrecord of the component New Record Handler. The manipulation of the argument filename leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://code-projects.org/ | Product |
| https://github.com/zzzxc643/cve/blob/main/Diary%20Management%20System%20Stack%20Buffer%20Overflow.md | Exploit |
| https://vuldb.com/?ctiid.306392 | Permissions Required VDB Entry |
| https://vuldb.com/?id.306392 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.559198 | Third Party Advisory VDB Entry |
Configurations
History
10 May 2025, 01:03
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/zzzxc643/cve/blob/main/Diary%20Management%20System%20Stack%20Buffer%20Overflow.md - Exploit | |
| References | () https://code-projects.org/ - Product | |
| References | () https://vuldb.com/?submit.559198 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.306392 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?ctiid.306392 - Permissions Required, VDB Entry | |
| CPE | cpe:2.3:a:fabian:personal_diary_management_system:1.0:*:*:*:*:*:*:* | |
| CWE | CWE-787 | |
| First Time |
Fabian personal Diary Management System
Fabian |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
28 Apr 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-28 17:15
Updated : 2025-05-10 01:03
NVD link : CVE-2025-4029
Mitre link : CVE-2025-4029
JSON object : View
Products Affected
fabian
- personal_diary_management_system