Cobian Backup Denial-of-Service Vulnerability in FTP Password Field

A denial-of-service vulnerability has been identified in Cobian Backup 11 Gravity, specifically in version 11.2.0.582. The issue arises in the FTP password input field, where attackers can paste a specially crafted 800-byte buffer to crash the application.

Impact

Exploitation of this vulnerability leads to a crash of the Cobian Backup application.

Reproduction

To reproduce this vulnerability, first generate an 800-byte buffer using a Python script. Save this buffer into a text file. Then, open Cobian Backup 11 Gravity and create a new FTP task. Paste the buffered content into the password field and confirm the task. The application will crash upon doing so.