GeoGebra Classic Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in GeoGebra Classic version 5.0.631.0-d. The issue arises in the input field, where attackers can cause the application to crash by sending excessively large buffer content. By generating a buffer of 800,000 repeated characters and pasting it into the 'Entrada:' input field, the application becomes unresponsive and crashes.

Impact

Exploitation of this vulnerability leads to a crash of the GeoGebra application, causing it to become unresponsive.

Reproduction

To reproduce this vulnerability, open GeoGebra Classic version 5.0.631.0-d on a Windows operating system. Once the application is running, use a Python script to create a text file containing 800,000 repeated characters. After the file is created, copy its contents and paste them into the 'Entrada:' input field. The application will crash shortly after the buffer is pasted.