This vulnerability involves a stack-based buffer overflow in the 'gets' function within the Customer Search Module of DefaultFuction Customer-Relationship-Management-In-C-Project version 2.0. The flaw allows remote attackers to cause memory corruption by manipulating input to the vulnerable function. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. Exploit code is publicly available, but there is no vendor-provided patch or official remediation guidance at this time.

Successful exploitation of this vulnerability could lead to memory corruption on the affected system, potentially allowing an attacker to disrupt service or execute arbitrary code with limited privileges. The vulnerability is remotely exploitable without user interaction. However, the impact is rated medium due to the limited privileges and lack of confirmed active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The vendor has acknowledged the issue and is processing a fix. Until an official patch is released, users should monitor vendor communications for updates and consider applying any temporary mitigations recommended by the vendor once available.