Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2018-25213

Nsauditor 3.0.28.0 Local SEH Buffer Overflow

Description

Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nsauditor Nsauditor Local SEH Buffer Overflow

  • 3.0.28.0affected

References