Description
RoboImport 1.2.0.72 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to registration fields. Attackers can paste a 6000-byte buffer into the Registration Name and Registration Key fields and click Register to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Picajet | RoboImport | 1.2.0.72 | — |
References
- ExploitDB-45382 exploit
- Product Reference product
- VulnCheck Advisory: RoboImport 1.2.0.72 Denial of Service via Registration Fields third-party-advisory