Description
Duplicate Cleaner Pro 4.1.3 contains a denial of service vulnerability that allows attackers to crash the application by injecting an oversized buffer into the license key field. Attackers can generate a 6000-byte payload and paste it into the license activation field to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| DigitalVolcano Software | Duplicate Cleaner Pro | 4 | — |
References
- ExploitDB-47873 exploit
- Vendor Homepage product
- VulnCheck Advisory: Duplicate Cleaner Pro 4 - Denial of Service third-party-advisory