CVE-2018-25268 PUBLISHED

LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potentially achieve code execution.

• Gionathan "John" Reale finder

• ExploitDB-45968
• Official Product Homepage
• VulnCheck Advisory: LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field

• Out-of-bounds Write CWE