Vulnerability Description
IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data into the 'From Addr' and 'To Addr' fields and trigger the crash by clicking the Start button, causing denial of service and SEH overwrite.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ks-Soft | Ip-Tools | <= 2.50 |
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/46286ExploitVDB Entry
- https://www.ks-soft.net/ip-tools.eng/index.htmProduct
- https://www.vulncheck.com/advisories/ip-tools-local-buffer-overflow-denial-of-seThird Party Advisory
FAQ
What is CVE-2018-25256?
CVE-2018-25256 is a vulnerability with a CVSS score of 5.5 (MEDIUM). IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malici...
How severe is CVE-2018-25256?
CVE-2018-25256 has been rated MEDIUM with a CVSS base score of 5.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-25256?
Check the references section above for vendor advisories and patch information. Affected products include: Ks-Soft Ip-Tools.