CVE-2018-25251

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2018-25251", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-04-04T13:27:41.226Z", "datePublished": "2026-04-04T13:51:15.698Z", "dateUpdated": "2026-04-06T18:02:54.033Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-04-04T20:00:09.378Z"}, "datePublic": "2018-10-13T00:00:00.000Z", "title": "Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket", "descriptions": [{"lang": "en", "value": "Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu to achieve code execution through SEH chain exploitation."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Out-of-bounds Write", "cweId": "CWE-787", "type": "CWE"}]}], "affected": [{"vendor": "Sourceforge", "product": "Snes9K 0.0.9z", "versions": [{"version": "0.0.9z", "status": "affected"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "baseScore": 8.6, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS"}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS"}], "references": [{"url": "https://www.exploit-db.com/exploits/45598", "name": "ExploitDB-45598", "tags": ["exploit"]}, {"url": "https://sourceforge.net/projects/snes9k/", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "https://sourceforge.net/projects/snes9k/files/latest/download", "name": "Product Reference", "tags": ["product"]}, {"name": "VulnCheck Advisory: Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/snes9k-9z-buffer-overflow-seh-via-netplay-socket"}], "credits": [{"lang": "en", "value": "Abdullah Al\u0131\u00e7", "type": "finder"}], "x_generator": {"engine": "vulncheck"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2018-25251", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-06T17:54:44.486480Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T18:02:54.033Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2018-25251", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-06T17:54:44.486480Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T17:59:38.024Z"}}], "cna": {"title": "Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket", "credits": [{"lang": "en", "type": "finder", "value": "Abdullah Al\u0131\u00e7"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Sourceforge", "product": "Snes9K 0.0.9z", "versions": [{"status": "affected", "version": "0.0.9z"}]}], "datePublic": "2018-10-13T00:00:00.000Z", "references": [{"url": "https://www.exploit-db.com/exploits/45598", "name": "ExploitDB-45598", "tags": ["exploit"]}, {"url": "https://sourceforge.net/projects/snes9k/", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "https://sourceforge.net/projects/snes9k/files/latest/download", "name": "Product Reference", "tags": ["product"]}, {"url": "https://www.vulncheck.com/advisories/snes9k-9z-buffer-overflow-seh-via-netplay-socket", "name": "VulnCheck Advisory: Snes9K 0.0.9z Buffer Overflow SEH via Netplay Socket", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu to achieve code execution through SEH chain exploitation."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-04-04T20:00:09.378Z"}}}, "cveMetadata": {"cveId": "CVE-2018-25251", "state": "PUBLISHED", "dateUpdated": "2026-04-06T18:02:54.033Z", "dateReserved": "2026-04-04T13:27:41.226Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-04-04T13:51:15.698Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Snes9K 0.0.9z", "vendor": "Sourceforge", "versions": [{"status": "affected", "version": "0.0.9z"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Snes9K 0.0.9z contains a buffer overflow vulnerability in the Netplay Socket Port Number field that allows local attackers to trigger a structured exception handler (SEH) overwrite. Attackers can craft a malicious payload and paste it into the Socket Port Number field via the Netplay Options menu to achieve code execution through SEH chain exploitation."}, {"lang": "es", "value": "Snes9K 0.0.9z contiene una vulnerabilidad de desbordamiento de b\u00fafer en el campo N\u00famero de Puerto de Socket de Netplay que permite a atacantes locales desencadenar una sobrescritura del gestor de excepciones estructuradas (SEH). Los atacantes pueden crear una carga \u00fatil maliciosa y pegarla en el campo N\u00famero de Puerto de Socket a trav\u00e9s del men\u00fa Opciones de Netplay para lograr la ejecuci\u00f3n de c\u00f3digo mediante la explotaci\u00f3n de la cadena SEH."}], "id": "CVE-2018-25251", "lastModified": "2026-07-24T22:10:00.140", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2018-25251", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-06T17:54:44.486480Z", "version": "2.0.3"}}]}, "published": "2026-04-04T14:16:21.203", "references": [{"source": "disclosure@vulncheck.com", "url": "https://sourceforge.net/projects/snes9k/"}, {"source": "disclosure@vulncheck.com", "url": "https://sourceforge.net/projects/snes9k/files/latest/download"}, {"source": "disclosure@vulncheck.com", "url": "https://www.exploit-db.com/exploits/45598"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/snes9k-9z-buffer-overflow-seh-via-netplay-socket"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "0.0.9z"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Snes9K 0.0.9z", "source": "cna", "vendor": "Sourceforge"}, "product": "snes9k_0.0.9z", "vendor": "sourceforge"}], "analysis": {"en": {"generated_at": "2026-04-04T17:22:10.566862+00:00", "value": {"mitigation_remediation": ["Upgrade to a patched or newer release of Snes9K if one exists.", "If no patch is available, avoid enabling the Netplay feature or uninstall Snes9K.", "Check the vendor\u2019s website or Sourceforge page for updates or advisories.", "Restrict local user privileges and apply standard software hardening practices."], "summary": {"action": "Immediate Patch", "impact": "Local code execution via SEH overwrite"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the Sourceforge Snes9K emulator version 0.0.9z. No other versions or products are listed as affected.", "description_and_impact": "Snes9K 0.0.9z contains a buffer overflow in the Netplay Socket Port Number field. A local attacker can enter a crafted payload through the Netplay Options menu, overwriting a structured exception handler and gaining arbitrary code execution on the system. The flaw directly compromises the confidentiality, integrity, and availability of the host where the emulator runs.", "risk_and_exploitability": "With a CVSS score of 8.6, the flaw is considered high severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting limited known exploitation but still posing a significant risk. The exploit requires local access to the machine running Snes9K and the attacker must launch the Netplay Options dialog to inject the overflow. Because it achieves code execution through SEH chain exploitation, a determined adversary could gain full control of the targeted system."}}}}, "created": "2026-04-06T20:27:00.935811+00:00", "updated": "2026-04-06T21:57:36.866432+00:00", "vendors": ["sourceforge", "sourceforge$PRODUCT$snes9k_0.0.9z"]}