RDP Manager Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in RDP Manager version 4.9.9.3. This vulnerability allows local attackers to crash the application by entering oversized data in the 'Verbindungsname' (Connection Name) and 'Server' fields. The application becomes unresponsive and may require a full reinstallation to restore functionality.

Impact

Exploitation of this vulnerability leads to a permanent application crash, causing the software to become unresponsive and require reinstallation.

Reproduction

To reproduce this vulnerability, install RDP Manager version 4.9.9.3 and add a new entry in the main tab. Enter a large amount of characters, up to 1024, in the 'Verbindungsname' and 'Server' fields, and save the entry. The application will freeze and crash, displaying multiple errors. After restarting, the application will crash permanently. Alternatively, a database backup can be exported, modified to include a malformed entry, and imported to achieve the same effect.