CVE-2019-25336 PUBLISHED

SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attackers to execute arbitrary code by crafting a malicious payload. Attackers can generate a specially crafted Base64 encoded payload to trigger a Structured Exception Handler (SEH) overwrite and execute shellcode on the vulnerable system.

• Kirill Nikolaev finder

• ExploitDB-47759
• Vendor Homepage
• Original DOS Exploit Reference
• VulnCheck Advisory: SpotAuditor 5.3.2 - 'Base64' Local Buffer Overflow (SEH)

• Stack-based Buffer Overflow CWE