Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2018-25219

PassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow

Description

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadget and shellcode that triggers code execution when pasted into the Licensed E-mail and Registration Code field during the registration process.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Passfab Excel Password Recovery

  • 8.3.1affected

References