CVE-2018-25219

HIGH

PassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-25219. PoCs published by Achilles.

AI-analyzed exploit summary This exploit leverages a structured exception handler (SEH) overflow in PassFab Excel Password Recovery 8.3.1 to achieve arbitrary code execution. It constructs a malicious payload with a NOP sled and shellcode (generated via msfvenom) to spawn calc.exe, demonstrating a local privilege escalation via a crafted registration input.

Description

PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadget and shellcode that triggers code execution when pasted into the Licensed E-mail and Registration Code field during the registration process.

Exploits (1)

exploitdb WORKING POC
by Achilles · pythonlocalwindows
https://www.exploit-db.com/exploits/46301

This exploit leverages a structured exception handler (SEH) overflow in PassFab Excel Password Recovery 8.3.1 to achieve arbitrary code execution. It constructs a malicious payload with a NOP sled and shellcode (generated via msfvenom) to spawn calc.exe, demonstrating a local privilege escalation via a crafted registration input.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: PassFab Excel Password Recovery 8.3.1
No auth needed
Prerequisites: PassFab Excel Password Recovery 8.3.1 installed on Windows XP SP3 · Ability to paste malicious input into the registration field
devstral-2 · analyzed Apr 08, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit exploit
ExploitDB-46301
https://www.exploit-db.com/exploits/46301
Product product
Official Product Homepage
https://www.passfab.com/products/excel-password-recovery.html
Third Party Advisory third-party-advisory
VulnCheck Advisory: PassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow
https://www.vulncheck.com/advisories/passfab-excel-password-recovery-seh-buffer-overflow

Scores

CVSS v3 8.4
EPSS 0.0025
EPSS Percentile 15.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (2)
Passfab/Excel Password Recovery 8.3.1
passfab/excel_password_recovery < 8.3.1
Published Mar 26, 2026
Tracked Since Mar 26, 2026