CVE-2018-25254

Katalog CVE

CVSS 9.8 · Critical EPSS 0,91%

Kerentanan Out-of-bounds Write pada nico-ftp project nico-ftp. Skor CVSS 3.1 9.8 (Critical) menurut vulncheck.com.

Deskripsi (NVD)

NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending crafted FTP commands. Attackers can connect to the FTP service and send oversized data in response handlers to overwrite SEH pointers and redirect execution to injected shellcode.

Rincian

Terbit di NVD

4 April 2026

Terakhir diubah

6 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,91% peluang dieksploitasi; lebih tinggi dari 59,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/nico-ftp-buffer-overflow-seh advisory pihak ketiga
• https://www.exploit-db.com/exploits/45442 exploit · vdb entry
• https://en.softonic.com/download/nico-ftp/windows/post-download product