Description
APKF Product Key Finder 2.5.8.0 contains a denial of service vulnerability that allows attackers to crash the application by overflowing the 'Name' input field. Attackers can generate a 1000-character payload and paste it into the registration name field to trigger an application crash.
Problem types
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Product status
Credits
Ismail Tasdelen
References
www.exploit-db.com/exploits/47937 (ExploitDB-47937)
www.nsauditor.com/ (Vendor Homepage)
www.vulncheck.com/...oduct-key-finder-name-denial-of-service (VulnCheck Advisory: APKF Product Key Finder 2.5.8.0 - 'Name' Denial of Service)