Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2018-25307

SysGauge Pro 4.6.12 Local Buffer Overflow SEH

Description

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute arbitrary code with application privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Sysgauge SysGauge Pro

  • 4.6.12affected

References