The vulnerability is a local buffer overflow in MegaPing that occurs when an attacker supplies an oversized payload to the Destination Address List field of the Finger function and activates the Start button. The overflow causes the application to crash, resulting in a denial of service. The weakness is a classic buffer overflow (CWE-787).

The affected product is Magnetosoft MegaPing. No version information is provided in the advisory, implying that all releases could potentially be vulnerable until an official fix is released.

The CVSS score of 6.9 indicates moderate severity. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower likelihood of widespread exploitation. Exploitation requires local access to the host running MegaPing, meaning that the threat is limited to users who have the ability to execute code locally. Nonetheless, any such local attacker can reliably crash the application, disrupting availability until mitigated.