Stack-based buffer overflow in Sakura Editor - #VU145344

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to stack-based buffer overflow in CEditView::ViewDiffInfo command line construction in CEditView_Diff.cpp when processing overly long file paths for diff display. A local user can supply two files with a combined path length of 978 characters or more and trigger the diff display feature to cause a denial of service.

Exploitation requires diff.exe to be present in the same folder as sakura.exe, and long path support on Windows 10 or later makes the issue easier to trigger.

Affected software

Remediation

External References

• https://github.com/sakura-editor/sakura/security/advisories/GHSA-jpr9-7379-v6m7

Related Security Bulletins

• Multiple vulnerabilities in Sakura Editor