Softros LAN Messenger Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Softros LAN Messenger version 9.2. This vulnerability allows local attackers to crash the application by entering an excessively long string, up to 2000 characters, in the 'Log Files Location' custom path parameter. The crash occurs when the 'OK' button is clicked.

Impact

Exploiting this vulnerability leads to a crash of the Softros LAN Messenger application, causing a denial-of-service condition where the application becomes unresponsive or unavailable.

Reproduction

To reproduce this vulnerability, open Softros LAN Messenger 9.2 and navigate to the 'Logging' section. Select 'Custom Location' in the 'Log Files Location' field and paste a string of 2000 characters. After clicking 'OK', the application will crash.