Microsoft Eco Search Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Microsoft Eco Search version 1.0.2.0. This vulnerability allows local attackers to crash the application by entering an excessively long string, specifically a buffer of 950 or more characters, into the search bar. When a search is initiated, the application crashes.

Impact

Exploitation of this vulnerability leads to a crash of the application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, paste a buffer of 950 or more characters into the search bar of Microsoft Eco Search version 1.0.2.0. After entering the text, initiate a search, which will cause the application to crash.