RAR Password Recovery Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in RAR Password Recovery version 1.80. This vulnerability allows local attackers to crash the application by sending an oversized payload through the registration dialog. By crafting a string longer than 6000 bytes and pasting it into the User Name and Registration Code fields, attackers can trigger an application crash.

Impact

Exploitation of this vulnerability causes the application to crash, creating a denial-of-service condition.

Reproduction

To reproduce this vulnerability, first create a text file named 'Evil.txt' containing a payload of 6000 bytes. After the file is created, open RAR Password Recovery 1.80 and navigate to the registration dialog. Paste the contents of 'Evil.txt' into the User Name and Registration Code fields, then click 'OK'. The application will crash, demonstrating the denial-of-service condition.