RealTerm Serial Terminal Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in RealTerm Serial Terminal version 2.0.0.70. This vulnerability allows local attackers to crash the application by entering an excessively long string in the Port field. The issue can be triggered by pasting a buffer of 1000 characters into the Port input field and clicking the open button.

Impact

Exploitation of this vulnerability leads to a crash of the RealTerm application.

Reproduction

To reproduce this vulnerability, paste a 1000-character string into the Port field of RealTerm Serial Terminal version 2.0.0.70 and click the open button. This will cause the application to crash.