AdminExpress Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in AdminExpress version 1.2.5.485. This vulnerability allows local attackers to crash the application by sending oversized input through the 'System Compare' feature. By pasting a large buffer of characters into the 'Folder Path' field and activating the comparison function, the application becomes unresponsive or crashes.

Impact

Exploitation of this vulnerability leads to a crash of the application, causing it to become unresponsive.

Reproduction

To reproduce this vulnerability, open AdminExpress 1.2.5 and navigate to the 'System Compare' feature. Paste a large buffer of characters into the 'Folder Path' field. Then, click the scales icon next to the 'Folder Path' field to trigger the comparison. The application will become unresponsive or crash.