CVE-2018-25243

FastTube 1.0.1.0 Denial of Service via Search

Published Apr 4, 2026 CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Description

FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.

Analysis

Technical impact

FastTube version 1.0.1.0 contains a denial‑of‑service vulnerability that can be triggered when a user submits a search query longer than 1900 characters. The excessive string causes the application to crash, rendering it unavailable to the user initiating the request.

Affected Systems

The affected product is FastTube, version 1.0.1.0, as listed by the vendor. No other products or versions are noted.

Risk and Exploitability

The CVSS v3.1 score of 6.9 indicates a moderate‑to‑high impact. Exploitation requires local access to a device running the application, limiting the attack surface. EPSS data is not available, and the flaw is not currently listed in the CISA KEV catalog, but the moderate severity recommends that users patch promptly when an update is released.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

FastTube

affected

Version	Status	Constraints
`1.0.1.0`	affected	—

No data.

Vendor Product Versions

Fasttube

Version	Status	Scheme	Platform
`1.0.1.0`	affected	generic	—

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

Update FastTube to a patched version if one is available.
If an update is not available, restrict local access to the application or run it in a sandboxed environment.
Monitor for repeated crashes and review application logs for abnormal activity.

Generated by OpenCVE AI on April 4, 2026 at 18:21 UTC.

Tracking

Advisories

No advisories available

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact None

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.128% probability within 30 days)

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://www.exploit-db.com/exploits/46199
https://www.microsoft.com/store/productId/9MXS9JVDP25V
https://www.vulncheck.com/advisories/fasttube-denial-of-service-via-search

History

Jul 15, 2026 2:15 AM First appearance in the feed. Affected versions updated. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Caspie Caspie fast Tube
CPEs		cpe:2.3:a:caspie:fast_tube:1.0.1.0:::::wordpress::
Vendors & Products		Caspie Caspie fast Tube

Apr 7, 2026 12:00 AM First appearance in the feed. Affected vendors updated View changes

Type	Values Removed	Values Added
First Time appeared		Fasttube Fasttube fasttube
Vendors & Products		Fasttube Fasttube fasttube

Apr 6, 2026 4:45 PM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Apr 4, 2026 9:15 PM References updated View changes

Type	Values Removed	Values Added
References	https://www.vulncheck.com/advisories/microsoft-fasttube-denial-of-service-via-search	https://www.vulncheck.com/advisories/fasttube-denial-of-service-via-search

Apr 4, 2026 4:15 PM Description updated. Title updated View changes

Type	Values Removed	Values Added
Description	Microsoft FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.	FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.
Title	Microsoft FastTube 1.0.1.0 Denial of Service via Search	FastTube 1.0.1.0 Denial of Service via Search

Apr 4, 2026 3:00 PM Description updated. Title updated. Weaknesses updated. Added references. Scoring metrics updated View changes

Type	Values Removed	Values Added
Description		Microsoft FastTube 1.0.1.0 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string to the search functionality. Attackers can paste a buffer of 1900 characters into the search bar and trigger a crash when the search operation is executed.
Title		Microsoft FastTube 1.0.1.0 Denial of Service via Search
Weaknesses		CWE-763
References		https://www.exploit-db.com/exploits/46199 https://www.microsoft.com/store/productId/9MXS9JVDP25V https://www.vulncheck.com/advisories/microsoft-fasttube-denial-of-service-via-search
Metrics		cvssV3_1 `{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}` cvssV4_0 `{'score': 6.9, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}`