CVE-2021-47798CWE-120

NoteBurner 2.35 - Denial Of Service (DoS) (PoC)

Medium · published January 15, 2026

CVSS v4.0
6.7
EPSS
0%
Percentile
35.7
In the wild
Unconfirmed
What it is

⚠️ A crafty 6000-byte string is all it takes to make NoteBurner 2.35 crash and burn! 💥 Think of it as a restaurant that can only handle a certain number of orders at once. If a customer suddenly dumps a massive pile of extra orders on the kitchen, they just won't be able to keep up and everything could end up on the floor! With this buffer overflow vulnerability, an attacker can crash the entire application by simply entering an oversized payload into the 'Name' and 'Code' fields. This means users could suddenly find themselves locked out of their work, which could lead to lost productivity and frustration.

Put simply

Think of it as a restaurant that can only handle a certain number of orders at once. If a customer suddenly dumps a massive pile of extra orders on the kitchen, they just won't be able to keep up and everything could end up on the floor! CVE-2021-47798 presents a buffer overflow vulnerability in NoteBurner 2.35, allowing attackers to crash the application by inputting a 6000-byte string into the license code fields, overflowing the allocated buffer and leading to application instability.

What to do

With this buffer overflow vulnerability, an attacker can crash the entire application by simply entering an oversized payload into the 'Name' and 'Code' fields. This means users could suddenly find themselves locked out of their work, which could lead to lost productivity and frustration. To mitigate this issue, ensure that users are updated to the latest version of NoteBurner where this vulnerability has been addressed. Additionally, implement input validation to limit the size of data being entered in critical fields. Regularly review software for updates to prevent similar issues. You've got this! Just follow these steps, and you'll keep your applications running smoothly! 🛡️

The record
Technical detail
CVSS v4.0
6.7 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00425 · 35.7th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-01-15T23:25Z
EPSS history
Timeline
  • 15 JAN 23:25Z
    NoteBurner 2.35 - Denial Of Service (DoS) (PoC)
    cvelistv5