Raimersoft RarmaRadio Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in RarmaRadio version 2.72.8. This issue allows attackers to crash the application by overflowing network configuration fields with large character buffers. By generating a buffer of 100,000 characters and pasting it into multiple network settings fields, application instability and potential crashes can be triggered.

Impact

Exploitation of this vulnerability leads to application crashes, causing a denial-of-service condition.

Reproduction

To reproduce this vulnerability, open RarmaRadio and navigate to the 'Edit' menu, then select 'Settings'. Click on the 'Network' option. A Python exploit script can be used to generate a 100,000-character buffer, which should be saved to a text file. The contents of this file can then be copied and pasted into the 'Username', 'Server', 'Port', and 'User Agent' fields. After clicking 'OK', the application will become unstable and crash.