CVE-2018-25232
MEDIUMSoftros LAN Messenger 9.2 Denial of Service via Log Files Location
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25232. PoCs published by Victor Mondragón.
AI-analyzed exploit summary This PoC exploits a buffer overflow vulnerability in Softros LAN Messenger 9.2 by writing a large string of 'A' characters to a file, which when used as a custom log file location, causes the application to crash. The exploit demonstrates a denial-of-service condition via a simple file write operation.
Description
Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the custom log files location field. Attackers can input a buffer of 2000 characters in the Log Files Location custom path parameter to trigger a crash when the OK button is clicked.
Exploits (1)
This PoC exploits a buffer overflow vulnerability in Softros LAN Messenger 9.2 by writing a large string of 'A' characters to a file, which when used as a custom log file location, causes the application to crash. The exploit demonstrates a denial-of-service condition via a simple file write operation.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H