Wansview Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in Wansview version 1.0.2. This vulnerability allows local attackers to crash the application by sending oversized input strings. During the process of adding a camera, attackers can inject 2000-byte payloads into the Camera name and DID number fields, which triggers the application to crash.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by running the Wansview application version 1.0.2 on a Windows 10 system. After creating a payload of 2000 bytes and saving it to a text file, the Wansview program can be opened. In the 'Add Camera' window, the contents of the text file can be pasted into the 'Camera name' and 'DID number' fields. Once 'Add' is clicked, the application will crash.