CVE-2018-25268

Katalog CVE

CVSS 7.8 · High EPSS 0,20%

Kerentanan Out-of-bounds Write pada lizardsystems lanspy. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potentially achieve code execution.

Rincian

Terbit di NVD

22 April 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 9,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/lanspy-local-buffer-overflow-via-scan-field advisory pihak ketiga
• https://www.exploit-db.com/exploits/45968 exploit · vdb entry
• https://lizardsystems.com product