Easy PhotoResQ Buffer Overflow Denial-of-Service Vulnerability

A buffer overflow vulnerability has been identified in Easy PhotoResQ version 1.0. This vulnerability allows local attackers to cause a denial-of-service condition by entering an excessively long string, up to 6000 bytes, in the Folder/filename field within the File Options dialog. The application crashes as a result of this input.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash.

Reproduction

To reproduce this vulnerability, first create a payload of 6000 bytes consisting of repeated characters. Save this payload to a file named 'exploit.txt'. Then, open Easy PhotoResQ and navigate to 'File' > 'Options'. In the 'Folder/filename' field, paste the contents of 'exploit.txt' and click 'OK'. The application will crash, demonstrating the denial-of-service condition.