Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-25255. PoCs published by absolomb.
AI-analyzed exploit summary This exploit demonstrates a local buffer overflow vulnerability in 10-Strike LANState 8.8 via a crafted .lsm file. It leverages SEH overwrite with a reverse shell payload, targeting the software's file parsing functionality.
Description
10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application.
Exploits (1)
This exploit demonstrates a local buffer overflow vulnerability in 10-Strike LANState 8.8 via a crafted .lsm file. It leverages SEH overwrite with a reverse shell payload, targeting the software's file parsing functionality.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H