Microsoft VSCO Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Microsoft VSCO version 1.1.1.0. This vulnerability allows local attackers to crash the application by entering an excessively long string into the search bar. Specifically, a buffer of 5000 characters can be pasted into the search functionality, which triggers the application to crash when the user navigates back to the home screen.

Impact

Exploitation of this vulnerability leads to a crash of the VSCO application, causing a denial-of-service condition where the application becomes unresponsive or unavailable to the user.

Reproduction

To reproduce this vulnerability, paste a buffer of 5000 characters into the search bar of Microsoft VSCO version 1.1.1.0. After submitting the search, navigate back to the home screen, which will cause the application to crash.