The vulnerability is a denial‑of‑service flaw in Eco Search 1.0.2.0 that arises when the search feature accepts an overly long input string. Exhausting the application’s buffer crashes the process, making the application unavailable until it is restarted.

Affected product is Eco Search, version 1.0.2.0, from vendor EcoSearch. No additional versions or products are listed as vulnerable.

The CVSS score of 6.9 indicates a moderate risk. No EPSS score is available, and the vulnerability is not cataloged in CISA’s KEV. Attackers must have local access to submit the long search string; the flaw exploits an input‑validation weakness, so exploitation requires the target to be running the application. The impact is limited to service availability for local users, but can affect business continuity if the application is critical.