CVE-2018-25154
CRITICALGNU Barcode 0.99 - Buffer Overflow in Code 93 Encoding
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25154. PoCs published by LiquidWorm.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in GNU Barcode 0.99, specifically in the `code93.c` file where the `strcat` function is used unsafely. The proof-of-concept triggers a global-buffer-overflow, as confirmed by AddressSanitizer, which could lead to arbitrary code execution.
Description
GNU Barcode 0.99 contains a buffer overflow vulnerability in its code 93 encoding process that allows attackers to trigger memory corruption. Attackers can exploit boundary errors during input file processing to potentially execute arbitrary code on the affected system.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in GNU Barcode 0.99, specifically in the `code93.c` file where the `strcat` function is used unsafely. The proof-of-concept triggers a global-buffer-overflow, as confirmed by AddressSanitizer, which could lead to arbitrary code execution.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H