AbsoluteTelnet Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in AbsoluteTelnet version 11.24. This issue allows local attackers to crash the application by manipulating the username and error report fields. The vulnerability can be exploited by inserting 1000 characters into the username or email address fields, causing the application to become unresponsive.

Impact

Exploitation of this vulnerability leads to a crash of the AbsoluteTelnet application, causing it to become unresponsive.

Reproduction

To reproduce this vulnerability, download and install AbsoluteTelnet version 11.24. After installation, a Python script can be used to create a text file containing 1000 characters. This file can then be used to fill the 'Username' or 'Your Email Address (optional)' fields in the application. Once the 'OK' button or 'Send Error Report' button is pressed, the application will crash.