Description
Dnss Domain Name Search Software contains a denial of service vulnerability that allows attackers to crash the application by providing an oversized registration key. Attackers can generate a 1000-character buffer payload and paste it into the registration key field to trigger an application crash.
Problem types
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Product status
Credits
Ismail Tasdelen
References
www.exploit-db.com/exploits/47856 (ExploitDB-47856)
www.nsauditor.com/ (Vendor Homepage)
www.vulncheck.com/...e-search-software-key-denial-of-service (VulnCheck Advisory: Dnss Domain Name Search Software - 'Key' Denial of Service)