Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2018-25284: HD Tune Pro 5.70 Crashes from Excessively Long File Names

CVE-2018-25284 · published 6 months ago

Summary

A bug in HD Tune Pro 5.70 can cause the application to crash if a user enters a very long file name. This could potentially be exploited by an attacker to disrupt the program's normal operation. To avoid this issue, it's recommended to update to a fixed version of HD Tune Pro.

Original advisory text

HD Tune Pro 5.70 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the folder/file name field. Attackers can trigger a denial of service by entering a 6000-byte payload through the File > Options > Save dialog's folder/file name input field.

References

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

6.9 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-120Classic Buffer Overflow

Timeline

Published26 Apr 2026

Updated3 Nov 2026

First seen26 Apr 2026

Sources

CVE-2018-25284 · NVD

Track software like this

Free during beta