CVE-2018-25215
MEDIUMExcel Password Recovery Professional 8.2.0.0 Local Buffer Overflow DoS
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25215. PoCs published by Achilles.
AI-analyzed exploit summary This Python script generates a 5000-byte buffer of 'A' characters to trigger a local buffer overflow in Excel Password Recovery Professional, leading to a denial-of-service (DoS) crash when pasted into the registration field.
Description
Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long string to the 'E-Mail and Registrations Code' field. Attackers can paste a crafted payload containing 5000 bytes of data into the registration field to trigger a crash when the Register button is clicked.
Exploits (1)
This Python script generates a 5000-byte buffer of 'A' characters to trigger a local buffer overflow in Excel Password Recovery Professional, leading to a denial-of-service (DoS) crash when pasted into the registration field.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H