SpotAuditor Denial-of-Service Vulnerability in Registration Dialog

A denial-of-service vulnerability has been identified in SpotAuditor version 5.2.6. The issue arises in the registration dialog, where local attackers can cause the application to crash by entering an excessively long string in the Name field. Exploitation involves pasting a buffer of 300 repeated characters into the Name input during the registration process, which triggers the application to crash.

Impact

Exploitation of this vulnerability leads to a crash of the SpotAuditor application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, first create a text file containing 300 repeated characters. Then, open SpotAuditor and navigate to the registration dialog. Paste the contents of the text file into the Name field, enter a registration key, and click 'OK'. The application will crash, demonstrating the denial-of-service vulnerability.