TapinRadio Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in TapinRadio version 2.13.7. The issue arises in the application proxy settings, where input fields can be overflowed with a large buffer of 20,000 characters. This overflow causes the application to become unresponsive, requiring users to reinstall the program.

Impact

Exploitation of this vulnerability leads to a crash of the TapinRadio application, causing it to become unresponsive and necessitating reinstallation.

Reproduction

To reproduce this vulnerability, open TapinRadio 2.13.7 and navigate to the Preferences settings. Under the Miscellaneous section, select 'Set Application Proxy'. Then, paste 20,000 characters into the username and address fields. After clicking 'OK', the application will close and become unresponsive, requiring uninstallation and reinstallation to restore functionality.