SmartFTP Client Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in SmartFTP Client versions through 9.0.2615.0. This vulnerability allows local attackers to crash the application by entering an excessively long string in the Host field. Specifically, a buffer of 300 repeated characters can be pasted into the Host connection parameter to trigger the crash.

Impact

Exploiting this vulnerability leads to a crash of the SmartFTP Client application, causing a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by pasting 300 repeated characters into the Host field of the SmartFTP Client version 9.0.2615.0. This action causes the application to crash.