Executive brief
Amac Mac Address Change is a utility used to modify the hardware address of network adapters on Windows systems. A flaw in the software's registration process allows a local user to crash the application by entering excessively long text into the registration fields. While this results in a service outage for the specific tool, it does not directly expose sensitive customer data or corporate network access.
Technical details
A local buffer overflow vulnerability exists in Amac Mac Address Change version 5.4 due to improper bounds checking on input fields within the registration form. Specifically, the 'Your Name', 'Your Company', and 'Register Code' fields are susceptible to an out-of-bounds write (CWE-787). An attacker with local access can trigger the vulnerability by pasting approximately 212 bytes of data into these fields and clicking the 'Register' button. This action results in an application crash (Denial of Service). The vulnerability was verified on Windows XP SP3, and a public Proof of Concept (PoC) is available.
Affected products
- Amac Mac Address Change 5.4
Timeline
- 2019-01-30: disclosed: Vulnerability discovered by Rafael Pedrero
- 2019-01-31: other: Exploit-DB PoC published
- 2026-04-05: advisory: NVD/VulnCheck advisory published