CVE-2018-25432
Received Received - Intake
Whois Buffer Overflow in Arm Whois 3.11

Publication date: 2026-06-01

Last updated on: 2026-06-01

Assigner: VulnCheck

Description
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through exception handler hijacking.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-06-01
Last Modified
2026-06-01
Generated
2026-06-02
AI Q&A
2026-06-02
EPSS Evaluated
N/A
NVD
CVE-2018-25432
EUVD
EUVD-2018-21953
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
arm whois 3.11
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler (SEH).

Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through exception handler hijacking.


How can this vulnerability impact me? :

This vulnerability allows local attackers to execute arbitrary code on the affected system.

Successful exploitation can lead to full control over the system, potentially compromising confidentiality, integrity, and availability of data and services.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart