A local attacker can cause Softros LAN Messenger 9.2 to crash by entering an overly long string, up to 2000 characters, into the custom Log Files Location field. The program terminates when the OK button is pressed, resulting in a loss of service for the user. The flaw is an imprecise buffer handling error (CWE-1285).

The vulnerability is limited to Softros LAN Messenger version 9.2. Users of other versions are not mentioned as affected and therefore are considered safe unless newer releases contain similar code.

The CVSS score of 6.8 indicates moderate severity, while the EPSS < 1% suggests that exploitation in the wild is unlikely. The flaw is not listed in the CISA KEV catalog, and no automated exploits are publicly available beyond the manual demonstration on Exploit‑DB. The attack requires local access to the application’s configuration interface, and it can be performed by any user who can launch the software and modify the log path. The resulting crash is a classic denial‑of‑service scenario.