Duplicate Cleaner Pro Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Duplicate Cleaner Pro version 4.1.3. This issue allows attackers to crash the application by injecting an oversized buffer into the license key field. By generating a 6000-byte payload and pasting it into the license activation field, the application can be made to crash.

Impact

Exploiting this vulnerability leads to a crash of the Duplicate Cleaner Pro application, causing a denial-of-service condition where the application becomes unresponsive or unavailable.

Reproduction

To reproduce this vulnerability, create a text file containing a 6000-byte payload of repeated characters. Open Duplicate Cleaner Pro and paste the contents of the text file into the 'License key' field. Click 'Activate' to trigger the application crash.