BlueAuditor Denial-of-Service Vulnerability in Registration Name Input Field

A denial-of-service vulnerability has been identified in BlueAuditor version 1.7.2.0. The issue arises in the registration name input field, where attackers can crash the application by entering a 1000-character buffer payload. This payload can be generated and saved to a file, which is then used to overwhelm the application, causing it to crash.

Impact

Exploitation of this vulnerability leads to a crash of the BlueAuditor application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, download and install BlueAuditor version 1.7.2.0. After installation, run a Python script that creates a file containing a 1000-character payload. Open the BlueAuditor application and navigate to the registration section. Copy the payload from the file and paste it into the 'Name' field. Click 'Ok' to submit. The application will crash, demonstrating the denial-of-service vulnerability.