Outlook Password Recovery Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in Outlook Password Recovery version 2.10. This vulnerability allows local attackers to cause a denial-of-service condition by crashing the application with an oversized payload. Exploitation involves creating a malicious text file with 6000 bytes of data and pasting it into the 'User Name and Registration Code' field.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash.

Reproduction

To reproduce this vulnerability, create a text file named 'Evil.txt' containing 6000 bytes of data. Open Outlook Password Recovery version 2.10 and copy the contents of 'Evil.txt' into the 'User Name and Registration Code' field. Click 'OK' to trigger the application crash.