CVE-2018-25219
HIGHPassFab Excel Password Recovery 8.3.1 SEH Buffer Overflow
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25219. PoCs published by Achilles.
AI-analyzed exploit summary This exploit leverages a structured exception handler (SEH) overflow in PassFab Excel Password Recovery 8.3.1 to achieve arbitrary code execution. It constructs a malicious payload with a NOP sled and shellcode (generated via msfvenom) to spawn calc.exe, demonstrating a local privilege escalation via a crafted registration input.
Description
PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload in the registration code field. Attackers can craft a buffer overflow payload with a pop-pop-ret gadget and shellcode that triggers code execution when pasted into the Licensed E-mail and Registration Code field during the registration process.
Exploits (1)
This exploit leverages a structured exception handler (SEH) overflow in PassFab Excel Password Recovery 8.3.1 to achieve arbitrary code execution. It constructs a malicious payload with a NOP sled and shellcode (generated via msfvenom) to spawn calc.exe, demonstrating a local privilege escalation via a crafted registration input.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H