NVClient Stack Buffer Overflow Vulnerability Allowing Denial-of-Service

A stack buffer overflow vulnerability has been identified in NVClient version 5.0, specifically within the user configuration contact field. This vulnerability allows attackers to overwrite 846 bytes of memory by pasting a crafted payload into the contact box, leading to a crash of the application and causing a denial-of-service condition.

Impact

Exploitation of this vulnerability causes the application to crash, creating a denial-of-service condition.

Reproduction

To reproduce this vulnerability, log into NVClient 5.0 and navigate to the user configuration section. Click 'Add users' and fill in the username and password fields. Then, paste the crafted payload, consisting of 846 bytes of repeated characters, into the contact box. After clicking 'OK', the application will crash.