MSN Password Recovery Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in MSN Password Recovery version 1.30. This issue allows attackers to crash the application by entering an excessively large input in the registration code field. By generating a 9000-byte buffer of repeated characters and pasting it into the 'User Name and Registration Code' field, the application can be forced to crash.

Impact

Exploiting this vulnerability leads to a crash of the MSN Password Recovery application, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, download and install MSN Password Recovery version 1.30. After installation, run a Python script that creates a text file containing a 9000-byte buffer of repeated characters. Open MSN Password Recovery and paste the contents of the text file into the 'User Name and Registration Code' field. Click 'OK' to trigger the application crash.