SourceCodester Telecom Billing Management System Buffer Overflow Vulnerability

A critical buffer overflow vulnerability has been identified in SourceCodester Telecom Billing Management System version 1.0. The issue arises in the 'addrecords' function of 'main.cpp', where the 'name' and 'phonenumber' arguments can be manipulated to cause a buffer overflow. This vulnerability requires local access to exploit.

Impact

Exploitation of this vulnerability leads to a buffer overflow, which can commonly result in arbitrary code execution or causing a program to crash.

Reproduction

The vulnerability can be reproduced by compiling the application with Visual Studio 2022, disabling stack protection and security development lifecycle features. After launching the program, select the first menu option and input data exceeding 50 bytes. This will trigger the buffer overflow, which can be observed using the Visual Studio debugger.