SpotPaltalk Denial-of-Service Vulnerability in Registration Code Input Field

A denial-of-service vulnerability has been identified in SpotPaltalk version 1.1.5. The issue arises in the registration code input field, where local attackers can cause the application to crash by submitting an excessively long string. By pasting a buffer of 1000 characters into the Name/Key field during registration and clicking the OK button, the application is triggered to crash.

Impact

Exploiting this vulnerability leads to a crash of the SpotPaltalk application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, register a new account in SpotPaltalk 1.1.5. During the registration process, paste a 1000-character buffer into the Name/Key field. After pasting, click the 'OK' button to complete the registration. The application will crash shortly after.