AnyBurn Buffer Overflow Vulnerability Leading to Denial-of-Service

A local buffer overflow vulnerability has been identified in AnyBurn version 4.3. This vulnerability allows local attackers to cause a denial-of-service condition by crashing the application. The issue arises when an excessively long string, up to 10,000 bytes, is supplied in the 'Image file name' field during the 'Copy disk to Image' operation.

Impact

Exploitation of this vulnerability leads to a crash of the AnyBurn application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, first create a text file named 'EVIL.txt' containing a 10,000-byte payload of repeated 'A' characters. Afterward, open AnyBurn and select the 'Copy disk to Image' option. Paste the contents of 'EVIL.txt' into the 'Image file name' parameter and click 'Create Now'. This action will trigger the buffer overflow, causing the application to crash.