BlueAuditor Buffer Overflow Vulnerability Leading to Denial-of-Service

A buffer overflow vulnerability has been identified in BlueAuditor version 1.7.2.0, specifically within the registration key field. This vulnerability allows local attackers to cause the application to crash by submitting an excessively large key value. By entering a 256-byte buffer filled with repeated characters, attackers can disrupt the application's normal functioning during the registration process, effectively creating a denial-of-service condition.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the application to crash and become unresponsive.

Reproduction

The vulnerability can be reproduced by entering a 256-byte buffer of repeated characters into the Key registration field of BlueAuditor 1.7.2.0. This can be automated with a Python script that writes the buffer to a file, which is then copied to the clipboard and pasted into the application during the registration process.