River Past Audio Converter Local Buffer Overflow Vulnerability Leading to Denial-of-Service

A local buffer overflow vulnerability has been identified in River Past Audio Converter version 7.7.16. This vulnerability resides in the activation code field, where local attackers can cause a denial-of-service condition by inputting an oversized string. By pasting a large payload of repeated characters into the 'E-Mail and Activation Code' field and clicking 'Activate', the application crashes.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash.

Reproduction

To reproduce this vulnerability, first create a text file named 'Evil.txt' containing approximately 3000 bytes of repeated characters. After the file is created, open River Past Audio Converter version 7.7.16. Copy the contents of 'Evil.txt' into the 'E-Mail and Activation Code' field. Click the 'Activate' button, which will trigger the application to crash.