SQL Server Password Changer Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in SQL Server Password Changer version 1.90. This vulnerability allows local attackers to cause a denial-of-service condition by crashing the application with an oversized payload. Specifically, injecting 6000 bytes of data into the User Name and Registration Code fields triggers the crash.

Impact

Exploitation of this vulnerability causes the application to crash, leading to a denial-of-service condition.

Reproduction

The vulnerability can be reproduced by writing a payload of 6000 bytes into a text file. This file's contents are then copied to the clipboard and pasted into the User Name and Registration Code fields of SQL Server Password Changer 1.90. After clicking 'OK', the application will crash.