iCash 7.6.5 contains a buffer overflow in the Connect to Server dialog. A local attacker can supply an oversized 7000‑byte string in the Host field, causing the application to crash. The vulnerability is a classic stack overflow (CWE‑120) that results in a denial‑of‑service condition, interrupting local users and processes that rely on the application.

The affected product is Maxprog iCash version 7.6.5. No other versions or components are listed as vulnerable in the provided data.

The CVSS score of 6.8 indicates moderate severity, while an EPSS score of less than 1% signals very low exploitation probability. The issue is exploitable only by local users; it lacks a remote attack vector and is not listed in CISA KEV. Overall risk is moderate but the likelihood of an attack occurring is low and the impact is limited to local application availability.