The vulnerability is a local buffer overflow in Terminal Services Manager 3.2.1 that can be triggered by supplying a long string to the computer name field when adding a server. This overflow causes the application to crash, resulting in a denial of service when the affected server entry is accessed. The weakness is a classic input validation flaw identified as CWE-787.

The affected product is LizardSystems Terminal Services Manager, version 3.2.1. The vulnerability has not been reported in other versions, and no additional vendor or product variants are listed.

The CVSS score for this flaw is 6.9, indicating a moderate to high risk. EPSS data is not available, and the vulnerability is not in the CISA KEV catalog, which suggests it has not yet been widely exploited publicly. Attackers would need local access to the machine to supply the oversized string and induce the crash, so the attack vector is local. Because the impact is a denial of service rather than code execution or data exfiltration, the overall threat is limited to availability disruption for the affected application.