Nsasoft Nsauditor Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Nsasoft Nsauditor version 3.2.0.0. The issue arises in the registration name input field, where attackers can paste a payload of 1000 bytes of repeated characters, leading to an application crash. This vulnerability exploits the lack of input size validation, causing the application to become unresponsive.

Impact

Exploitation of this vulnerability causes the application to crash, disrupting any ongoing tasks or processes.

Reproduction

To reproduce this vulnerability, first create a payload of 1000 bytes of repeated characters using a Python script. Save this payload to a file named 'POC.txt'. Then, run Nsauditor and navigate to the registration code entry field. Paste the contents of 'POC.txt' into the 'Name' field and click 'OK'. The application will crash, demonstrating the denial-of-service vulnerability.