ASPRunner.NET Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in ASPRunner.NET version 10.1. This vulnerability allows local attackers to crash the application by entering an excessively long string, up to 10,000 characters, in the table name field during the database table creation process.

Impact

Exploiting this vulnerability leads to a crash of the ASPRunner.NET application.

Reproduction

To reproduce this vulnerability, create a Python script that generates a string of 10,000 characters. Save this string to a text file. Then, open ASPRunner.NET and start the process to create a new database. When prompted to enter a table name, paste the contents of the text file into the table name field and proceed to create the table. The application will crash, demonstrating the denial-of-service vulnerability.