AbsoluteTelnet Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in AbsoluteTelnet version 11.12. This vulnerability allows local attackers to crash the application by entering an excessively long license name. By generating a payload of 2500 characters and pasting it into the license entry field, the application can be forced to crash.

Impact

Exploiting this vulnerability leads to a crash of the AbsoluteTelnet application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, first create a text file containing a 2500-character string of repeated 'A' characters. After saving this file, open AbsoluteTelnet and navigate to the license entry prompt. Copy the contents of the text file and paste it into the license code field. The application will crash upon pasting the oversized license name.