Code-Projects Pharmacy Management System Buffer Overflow Vulnerability

Vulnerability

A critical buffer overflow vulnerability has been identified in Code-Projects Pharmacy Management System version 1.0. The issue arises in the 'medicineType::take_order' function within the Add Order Details component. This vulnerability is caused by unbounded input handling, where user input is not properly validated before being copied to output buffers. As a result, attackers can exploit this flaw to corrupt memory, execute arbitrary code, or cause system crashes. The vulnerability must be exploited locally.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in memory corruption, arbitrary code execution, or causing the application to crash.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
10.0
exploitability
4.8
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.