CVE-2018-25427
CRITICALArm Whois 3.11 - Stack-based Buffer Overflow via Oversized IP/Domain Input
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25427. PoCs published by Semen Alexandrovich Lyhin.
AI-analyzed exploit summary This is a functional buffer overflow exploit for Arm Whois 3.11, leveraging SEH overwrite to achieve remote code execution via a crafted payload. The exploit uses alpha_mixed encoded shellcode to spawn a command shell.
Description
Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception handler and gain command execution when the application processes the input.
Exploits (1)
This is a functional buffer overflow exploit for Arm Whois 3.11, leveraging SEH overwrite to achieve remote code execution via a crafted payload. The exploit uses alpha_mixed encoded shellcode to spawn a command shell.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H