CVE-2018-25218
HIGHPassFab RAR Password Recovery 9.3.2 SEH Buffer Overflow
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25218. PoCs published by Achilles.
AI-analyzed exploit summary This exploit leverages a structured exception handler (SEH) overflow in PassFab RAR Password Recovery 9.3.2 to achieve arbitrary code execution. It constructs a payload with a NOP sled, SEH bypass, and msfvenom-generated shellcode to spawn calc.exe.
Description
PassFab RAR Password Recovery 9.3.2 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a payload with a buffer overflow, NSEH jump, and shellcode, then paste it into the 'Licensed E-mail and Registration Code' field during registration to trigger code execution.
Exploits (1)
This exploit leverages a structured exception handler (SEH) overflow in PassFab RAR Password Recovery 9.3.2 to achieve arbitrary code execution. It constructs a payload with a NOP sled, SEH bypass, and msfvenom-generated shellcode to spawn calc.exe.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H