Mintty before 3.4.5 allows remote servers to cause a denial of service (Windows GUI hang) by telling the Mintty window to change its title repeatedly at high speed, which results in many SetWindowTextA or SetWindowTextW calls. In other words, it does not implement a usleep or similar delay upon processing a title change.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-06-03T11:11:18
Updated: 2024-08-03T21:55:11.649Z
Reserved: 2021-03-19T00:00:00
Link: CVE-2021-28848
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-06-03T12:15:07.757
Modified: 2021-06-14T17:01:08.187
Link: CVE-2021-28848
Redhat
No data.