TransMac Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in TransMac version 12.3, specifically within the volume name field. This vulnerability allows local attackers to crash the application by entering an excessively long string. Exploitation involves creating a file with 1000 repeated characters, pasting it into the volume name field during the creation of a disk image, and thereby triggering an application crash.

Impact

Exploitation of this vulnerability causes the TransMac application to crash, disrupting any ongoing tasks or processes within the application.

Reproduction

To reproduce this vulnerability, first create a text file containing 1000 repeated characters. Copy the contents of this file to the clipboard. Then, open TransMac and navigate to 'File' > 'New Disk Image'. Paste the clipboard contents into the 'Volume name' field and click 'OK'. After saving the disk image, the application will crash.