vendor:
Office Product Key Finder
by:
Gokkul
7.8
CVSS
HIGH
Denial of Service
400
CWE
Product Name: Office Product Key Finder
Affected Version From: 1.5.4
Affected Version To: 1.5.4
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows 7 x64
2020
Office Product Key Finder 1.5.4 – Denial of Service (PoC)
Office Product Key Finder is offline product key finder software and allows to recover and find microsoft office 25 character product key for Microsoft Office 2013, Microsoft Office 2010, Microsoft Office 2007 and Microsoft Office 2003 installed on your PC or on network computers. An attacker can exploit this vulnerability by creating a malicious file containing a large number of 'A' characters followed by a large number of 'O' characters and then copying the content of the file to the clipboard. The attacker then opens Office Product Key Finder, selects 'Find Product Key', pastes the clipboard content into the 'Product Name' field and clicks 'Find Product Key'. This will cause the application to crash.
Mitigation:
Update to the latest version of Office Product Key Finder.
