← Retour à la recherche de CVE

CVE-2018-25307

SysGauge Pro

Description

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute arbitrary code with application privileges.

CVSS 8.4EPSS 0.15%Risque 0.85
Voir la source
Publication
2026-04-29 20:16:26
Versions concernées
<4.6.13
Type
Installed app
Vecteur
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H