The vulnerability is a classic stack buffer overflow in Visual Ping 0.8.0.0. By entering input larger than 4108 bytes in the Host, Time Out, Packet Size, Pause, or Loops fields, an attacker who can localize the application can cause a forced crash, resulting in a denial of service. The flaw stems from insufficient bounds checking (CWE‑120) and does not affect confidentiality or integrity, but it does interrupt the service and can be exploited by any privileged local user who can launch Visual Ping.

All installations of scanwith Visual Ping version 0.8.0.0 are affected. No other versions are listed in the CNA data, so the impact is confined to that release. The product is a Windows‑based network ping utility distributed by scanwith.

The CVSS base score of 6.9 indicates a medium severity of local denial of service. The lack of an EPSS metric and absence from CISA KEV suggest that the vulnerability has not yet been widely exploited in the wild. Exploitation requires a local attacker with the ability to start or interact with Visual Ping, and the attacker must supply an oversized payload; there are no publicly available remote vectors or privilege escalation steps indicated in the description.