Microsoft Smart VPN Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Microsoft Smart VPN version 1.1.3.0. This vulnerability allows local attackers to crash the application by sending oversized input through the search interface. By pasting a buffer of 2100 characters into the search bar, attackers can trigger an unhandled exception that causes the application to crash.

Impact

Exploitation of this vulnerability leads to a crash of the Microsoft Smart VPN application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, paste a buffer of 2100 characters into the top right search bar of the Microsoft Smart VPN application version 1.1.3.0. Press Enter, and the application will crash due to an unhandled exception.