ASPRunner Professional Buffer Overflow Vulnerability Leading to Denial-of-Service

A local buffer overflow vulnerability has been identified in ASPRunner Professional version 6.0.766. This vulnerability allows attackers to cause a denial-of-service condition by entering an excessively long project name during the project creation process. Specifically, pasting 180 or more characters into the 'Project name' field can trigger an application crash.

Impact

Exploitation of this vulnerability leads to a crash of the ASPRunner Professional application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, first run the ASPRunner Professional application. Then, initiate the project creation wizard and paste 180 or more characters into the 'Project name' field. After clicking the 'Next' button, the application will crash.