TransMac Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in TransMac version 12.2, specifically within the license key input field. This vulnerability allows local attackers to crash the application by entering an excessively long string. Exploitation involves creating a payload file with 4000 bytes of data, which is then pasted into the License Key field, causing the application to terminate unexpectedly.

Impact

Exploitation of this vulnerability causes the application to crash, creating a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by running TransMac version 12.2 on a Windows 7 32-bit system. After creating a payload file containing 4000 bytes of data, this payload is pasted into the License Key field of the application. Once 'OK' is clicked, the application crashes.