CEWE Photoshow Buffer Overflow Vulnerability in Login Dialog Allowing Denial-of-Service

A buffer overflow vulnerability has been identified in CEWE Photoshow version 6.3.4, specifically within the login dialog. This vulnerability allows attackers to cause a denial-of-service condition by submitting oversized input. By injecting 4000 bytes of data into the email address and password fields, the application can be made to crash.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash.

Reproduction

The vulnerability can be reproduced by running a Python script that creates a text file containing 4000 bytes of data. This file is then used to overwrite the email and password fields in the CEWE Photoshow login dialog. Once the 'OK' button is clicked, the application crashes.