Prime95 Buffer Overflow Vulnerability in Proxy Password Field Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in Prime95 version 29.4b7, specifically within the PrimeNet connection dialog. This vulnerability allows local attackers to cause a denial-of-service by entering an excessively long string, up to 6000 bytes, in the optional proxy password field. The application crashes when it processes the connection settings, creating a disruption in service.

Impact

Exploitation of this vulnerability leads to a crash of the Prime95 application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, Prime95 version 29.4b7 must be installed on a Windows 7 32-bit system. After launching the application, navigate to 'Test' > 'PrimeNet' > 'Connection'. In the connection dialog, enter some information in the fields until reaching the 'Optional proxy password' field. Paste a 6000-byte payload into this field and click 'Ok'. The application will crash shortly after.