Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-25360. PoCs published by bzyo.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in AgataSoft Auto PingMaster 1.5, leveraging SEH (Structured Exception Handler) overwrites to achieve remote code execution (calc.exe). The payload is crafted using msfvenom with an alpha_mixed encoder to bypass bad characters.
Description
AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious ping.txt file with shellcode and jump instructions that overwrite the SEH handler pointer to achieve code execution when the file contents are pasted into the application.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in AgataSoft Auto PingMaster 1.5, leveraging SEH (Structured Exception Handler) overwrites to achieve remote code execution (calc.exe). The payload is crafted using msfvenom with an alpha_mixed encoder to bypass bad characters.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H