GeoGebra Graphing Calculator Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in GeoGebra Graphing Calculator version 6.0.631.0. This vulnerability allows attackers to crash the application by inputting an oversized buffer. By generating a payload of 8000 repeated characters, attackers can overwhelm the input field, causing the application to become unresponsive.

Impact

Exploitation of this vulnerability leads to a crash of the GeoGebra Graphing Calculator application, causing it to become unresponsive.

Reproduction

To reproduce this vulnerability, open GeoGebra Graphing Calculator version 6.0.631.0 on a Windows operating system. Use a Python script to create a payload file containing 8000 repeated characters. After the payload file is generated, copy its contents and paste them into the 'Entrada...' input field of the application. The application will crash, demonstrating the denial-of-service vulnerability.