XnConvert Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in XnConvert version 1.82. The issue arises in the registration code input field, where attackers can paste a 9000-byte buffer of repeated characters to crash the application.

Impact

Exploitation of this vulnerability leads to a crash of the XnConvert application.

Reproduction

To reproduce this vulnerability, download and install XnConvert version 1.82 on a Windows system. After installation, create a text file named 'EVIL.txt' containing 9000 bytes of repeated characters. Copy the contents of this file to the clipboard, then open XnConvert and paste the data into the 'User Name and Registration Code' field. Click 'OK', and after receiving a pop-up message about an invalid code, the application will crash.