A buffer overflow vulnerability in Nsasoft Dnss Domain Name Search Software enables an attacker to cause a denial of service by providing a malicious input string.

The application fails to perform adequate bounds checking on the Name input field during the registration process. This allows an unauthenticated attacker to inject a 1000-character payload, resulting in a buffer overflow and subsequent application crash.

Successful exploitation of this vulnerability results in a denial of service, effectively rendering the application unusable. While the impact is limited to the local application instance, it disrupts administrative workflows and availability. The CVSS score of 7.5 reflects a high potential for service interruption despite the requirement for local interaction or specific user conditions.

Immediate Action: There is currently no vendor-provided patch available; organizations should restrict access to the application registration interface to authorized personnel only.

Proactive Monitoring: Review application error logs for recurring crash events or unusual input patterns within the registration module.

Compensating Controls: Implement endpoint security solutions that monitor for process memory corruption and prevent unauthorized execution of malformed input strings.

Public Exploit Available: Yes, a proof of concept is available via ExploitDB (EDB-ID: 47861).

Given the availability of a public proof of concept and the relative simplicity of the attack, users should exercise caution when handling registration inputs. Since no official patch is available, organizations must minimize exposure by strictly limiting access to the vulnerable software interface and monitoring for unexpected crashes that could indicate exploitation attempts.