CVE-2018-25213

High CVSS: 8.6

Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to the DNS Lookup tool. Attackers can craft a payload with SEH chain overwrite and inject shellcode through the DNS Query field to achieve code execution with application privileges.

Vendor

Nsasoft

Product

Nsauditor

CWE

CWE-787

Yayın Tarihi

2026-03-26 14:16:04

Güncelleme

2026-03-27 18:24:09

Source Identifier

disclosure@vulncheck.com

KEV Date Added

Kategoriler

CWE-787 Nsauditor HIGH Nsasoft 2026

Referanslar

http://www.nsauditor.com http://www.nsauditor.com/downloads/nsauditor_setup.exe https://www.exploit-db.com/exploits/46005 https://www.vulncheck.com/advisories/nsauditor-local-seh-buffer-overflow

Benzer Kayıtlar

Medium

CVE-2019-25596

SpotAuditor 5.2.6 contains a denial of service vulnerability in the registration dialog that allows local attackers to c…

Medium

CVE-2019-25597

NSauditor 3.1.2.0 contains a buffer overflow vulnerability in the SNMP Auditor Community field that allows local attacke…

Medium

CVE-2019-25434

SpotAuditor 5.3.1.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the applic…

Medium

CVE-2019-25340

SpotAuditor 5.3.2 contains a denial of service vulnerability in its Base64 decryption feature that allows attackers to c…

High

CVE-2019-25336

SpotAuditor 5.3.2 contains a local buffer overflow vulnerability in the Base64 Encrypted Password tool that allows attac…

Medium

CVE-2019-25334

Product Key Explorer 4.2.0.0 contains a denial of service vulnerability that allows local attackers to crash the applica…