WebDrive Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in WebDrive version 18.00.5057. This issue allows local attackers to crash the application by entering an excessively long string, specifically a buffer-overflow payload of 5000 bytes, in the username field during the setup of a Secure WebDAV connection. The vulnerability is triggered when the application attempts to test the connection, leading to a crash.

Impact

Exploitation of this vulnerability causes the WebDrive application to crash, disrupting any ongoing tasks or file transfers.

Reproduction

To reproduce this vulnerability, first create a text file containing a 5000-byte string, which can be done using a simple Python script. After preparing the payload, open WebDrive and initiate a new Secure WebDAV connection. Paste the payload into the username field, enter a password, and click 'Test Connection'. The application will crash, demonstrating the denial-of-service vulnerability.