The vulnerability is a buffer overflow in SQL Server Password Changer 1.90 that allows a local attacker to supply an oversized payload—6000 bytes—to the User Name and Registration Code fields, causing the application to crash and trigger a denial of service condition. The weakness matches CWE-787, a buffer copy without proper bounds checking.

The issue affects the application Top-Password: SQL Server Password Changer, specifically version 1.90.

The CVSS score of 6.9 indicates moderate severity; the EPSS score of less than 1% suggests low current exploitation probability. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. Exploitation requires local access to the vulnerable application, and successful exploitation results in a denial of service rather than escalation of privileges or data breach.