Nsasoft SpotIE Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in Nsasoft SpotIE version 2.9.5. The issue arises in the registration key input field, where attackers can paste a 1000-character buffer payload to crash the application. This vulnerability is classified as a 'Classic Buffer Overflow' according to the CWE.

Impact

Exploitation of this vulnerability leads to a crash of the SpotIE application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, download and install SpotIE version 2.9.5. After installation, navigate to the registration section and enter the 'Key' field. Generate a payload of 1000 characters, preferably using a script, and paste it into the 'Key' field. Once the payload is pasted, click 'Ok' to trigger the application crash.