CVE-2018-25289

Received Received - Intake

Buffer Overflow in Softdisk 3.0.3 Registration Causes DoS

Publication date: 2026-04-26

Last updated on: 2026-04-26

Assigner: VulnCheck

Description

Softdisk 3.0.3 contains a buffer overflow vulnerability in the registration code dialog that allows local attackers to crash the application by supplying an oversized string. Attackers can trigger the vulnerability by entering a 6000-byte payload in the Registration Name field through the Help menu's Enter Registration Code dialog to cause a denial of service.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-26

Last Modified

2026-04-26

Generated

2026-07-06

AI Q&A

2026-04-27

EPSS Evaluated

2026-07-05

NVD

CVE-2018-25289

EUVD

EUVD-2018-21809

Affected Vendors & Products

Vendor	Product	Version / Range
softdisk	softdisk	3.0.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

The vulnerability in Softdisk 3.0.3 is a buffer overflow in the registration code dialog. It occurs when a local attacker inputs an excessively large string—specifically a 6000-byte payload—into the Registration Name field accessed via the Help menu's Enter Registration Code dialog.

This oversized input causes the application to crash, leading to a denial of service condition.

Impact Analysis

This vulnerability can impact you by allowing a local attacker to crash the Softdisk application, causing a denial of service.

Since the attack requires local access and involves crashing the application, it can disrupt normal operations and availability of the software.

Hi! I’m here to help you understand CVE-2018-25289. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70