TaskCanvas Denial-of-Service Vulnerability in Registration Input Field

A denial-of-service vulnerability has been identified in TaskCanvas version 1.4.0. The issue arises in the registration code input field, where attackers can paste a 1000-character buffer payload to crash the application. This vulnerability is a classic buffer overflow, allowing for application instability and crashes.

Impact

Exploitation of this vulnerability leads to a crash of the TaskCanvas application, causing a denial-of-service condition where the application becomes unresponsive or unavailable.

Reproduction

To reproduce this vulnerability, download and install TaskCanvas version 1.4.0 on a Windows operating system. After installation, navigate to the registration code input field. Generate a payload consisting of 1000 characters, and paste this payload into the registration field. Once the payload is submitted, the application will crash, demonstrating the denial-of-service vulnerability.