CVE-2018-25427: Arm Whois 3.11 Buffer Overflow via SEH Overwrite
Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception handler and gain command execution when the application processes the input.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-25427?
CVE-2018-25427 has a severity rating of 9.3, indicating it's critical.
How do I fix CVE-2018-25427?
Fixing CVE-2018-25427 involves updating Arm Whois to a version that addresses the buffer overflow vulnerability.
What type of vulnerability is CVE-2018-25427?
CVE-2018-25427 is a stack-based buffer overflow vulnerability that can allow remote code execution.
What are the potential impacts of CVE-2018-25427?
Exploitation of CVE-2018-25427 can result in arbitrary code execution, leading to complete system compromise.
Who is affected by CVE-2018-25427?
Users of Arm Whois version 3.11 are particularly affected by CVE-2018-25427 due to the buffer overflow vulnerability.