eToolz Denial-of-Service Vulnerability via Buffer Overflow

A denial-of-service vulnerability has been identified in eToolz version 3.4.8.0. This vulnerability allows local attackers to crash the application by sending oversized input buffers. Specifically, a payload file containing 255 bytes of data can trigger a buffer overflow condition when processed by the application, leading to a crash.

Impact

Exploitation of this vulnerability causes the application to crash, creating a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by creating a file that contains 255 bytes of data. When this file is processed by eToolz 3.4.8.0, the application will crash due to the buffer overflow caused by the oversized input.