LanHelper Buffer Overflow Vulnerability Leading to Denial-of-Service

A local buffer overflow vulnerability has been identified in LanHelper version 1.74. This vulnerability allows attackers to crash the application by sending overly long input strings. Exploitation occurs through the 'Form Send Message' feature, where approximately 6000 bytes of data can be pasted into the 'Message text' field, causing a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash.

Reproduction

To reproduce this vulnerability, first run LanHelper version 1.74 on a Windows XP SP3 system. Then, copy 6000 bytes of 'A' characters into the clipboard. Navigate to the 'Form Send Message' feature, paste the 6000 bytes into the 'Message text' field, and click the 'Send' button. This action will trigger the buffer overflow, causing the application to crash.