Folder Lock Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in Folder Lock version 7.7.9, specifically within the serial number registration field. This vulnerability allows local attackers to cause a denial-of-service condition by submitting an oversized payload. By pasting a 6000-byte buffer of arbitrary data into the 'Serial Number and Registration Key' field, attackers can crash the application.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash.

Reproduction

To reproduce this vulnerability, create a text file named 'Evil.txt' containing a 6000-byte buffer of arbitrary data. Open Folder Lock 7.7.9 and navigate to the 'Serial Number and Registration Key' field. Paste the contents of 'Evil.txt' into the field and click 'Submit'. The application will crash, demonstrating the denial-of-service condition.