CVE-2018-25219

Katalog CVE

CVSS 7.8 · High EPSS 0,25%

Kerentanan Out-of-bounds Write pada passfab excel password recovery. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadget and shellcode that triggers code execution when pasted into the Licensed E-mail and Registration Code field during the registration process.

Rincian

Terbit di NVD

26 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/passfab-excel-password-recovery-seh-buffer-overflow advisory pihak ketiga
• https://www.exploit-db.com/exploits/46301 exploit · vdb entry
• https://www.passfab.com/downloads/passfab-excel-password-recovery.exe product
• https://www.passfab.com/products/excel-password-recovery.html product