CVE-2018-25255

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2018-25255", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-04-04T13:30:17.673Z", "datePublished": "2026-04-04T13:51:18.689Z", "dateUpdated": "2026-04-06T13:26:37.887Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-04-04T20:00:12.827Z"}, "datePublic": "2018-07-24T00:00:00.000Z", "title": "10-Strike LANState 8.8 Local Buffer Overflow SEH", "descriptions": [{"lang": "en", "value": "10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Out-of-bounds Write", "cweId": "CWE-787", "type": "CWE"}]}], "affected": [{"vendor": "10-Strike", "product": "Strike LANState", "versions": [{"version": "8.8", "status": "affected"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "baseScore": 8.6, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS"}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS"}], "references": [{"url": "https://www.exploit-db.com/exploits/45086", "name": "ExploitDB-45086", "tags": ["exploit"]}, {"url": "https://www.10-strike.com/products.shtml", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "https://www.10-strike.com/lanstate/download.shtml", "name": "Product Reference", "tags": ["product"]}, {"name": "VulnCheck Advisory: 10-Strike LANState 8.8 Local Buffer Overflow SEH", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/10-strike-lanstate-local-buffer-overflow-seh"}], "credits": [{"lang": "en", "value": "absolomb", "type": "finder"}], "x_generator": {"engine": "vulncheck"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-06T13:26:26.613283Z", "id": "CVE-2018-25255", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T13:26:37.887Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2018-25255", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-04-06T13:26:26.613283Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-06T13:26:33.185Z"}}], "cna": {"title": "10-Strike LANState 8.8 Local Buffer Overflow SEH", "credits": [{"lang": "en", "type": "finder", "value": "absolomb"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "10-Strike", "product": "Strike LANState", "versions": [{"status": "affected", "version": "8.8"}]}], "datePublic": "2018-07-24T00:00:00.000Z", "references": [{"url": "https://www.exploit-db.com/exploits/45086", "name": "ExploitDB-45086", "tags": ["exploit"]}, {"url": "https://www.10-strike.com/products.shtml", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "https://www.10-strike.com/lanstate/download.shtml", "name": "Product Reference", "tags": ["product"]}, {"url": "https://www.vulncheck.com/advisories/10-strike-lanstate-local-buffer-overflow-seh", "name": "VulnCheck Advisory: 10-Strike LANState 8.8 Local Buffer Overflow SEH", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "Out-of-bounds Write"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-04-04T20:00:12.827Z"}}}, "cveMetadata": {"cveId": "CVE-2018-25255", "state": "PUBLISHED", "dateUpdated": "2026-04-06T13:26:37.887Z", "dateReserved": "2026-04-04T13:30:17.673Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-04-04T13:51:18.689Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Strike LANState", "vendor": "10-Strike", "versions": [{"status": "affected", "version": "8.8"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application."}, {"lang": "es", "value": "10-Strike LANState 8.8 contiene una vulnerabilidad local de desbordamiento de b\u00fafer en el manejo estructurado de excepciones que permite a atacantes locales ejecutar c\u00f3digo arbitrario mediante la creaci\u00f3n de archivos de mapa LSM maliciosos. Los atacantes pueden crear un archivo LSM con formato especial con una carga \u00fatil en el par\u00e1metro ObjCaption que desborda el b\u00fafer, sobrescribe la cadena SEH y ejecuta shellcode cuando el archivo se abre en la aplicaci\u00f3n."}], "id": "CVE-2018-25255", "lastModified": "2026-07-20T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2018-25255", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-04-06T13:26:26.613283Z", "version": "2.0.3"}}]}, "published": "2026-04-04T14:16:21.907", "references": [{"source": "disclosure@vulncheck.com", "url": "https://www.10-strike.com/lanstate/download.shtml"}, {"source": "disclosure@vulncheck.com", "url": "https://www.10-strike.com/products.shtml"}, {"source": "disclosure@vulncheck.com", "url": "https://www.exploit-db.com/exploits/45086"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/10-strike-lanstate-local-buffer-overflow-seh"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "8.8"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Strike LANState", "source": "cna", "vendor": "10-Strike"}, "product": "strike_lanstate", "vendor": "10-strike"}], "analysis": {"en": {"generated_at": "2026-04-04T17:20:45.688097+00:00", "value": {"mitigation_remediation": ["Apply the vendor\u2019s patch or upgrade to a non\u2011vulnerable version of Strike LANState. If a patch is not immediately available, limit the ability of users to open or create LSM files, or employ application whitelisting to block execution of unknown files. Monitor the environment for malicious LSM files and review system logs for abnormal SEH behavior."], "summary": {"action": "Patch", "impact": "Arbitrary Code Execution"}, "threat_synthesis": {"affected_systems": "The affected product is Strike LANState, version 8.8, distributed by 10-Strike. No other versions were specifically mentioned as affected in the available data.", "description_and_impact": "A local buffer overflow exists in structured exception handling within 10-Strike LANState 8.8. By crafting a malicious LSM file, a local attacker can overflow a buffer in the ObjCaption parameter, overwrite the SEH chain, and execute arbitrary shellcode when the file is opened. The vulnerability permits attackers to run code with the privileges of the user launching the file, potentially compromising system integrity and confidentiality.", "risk_and_exploitability": "The vulnerability carries a CVSS score of 8.6, indicating high severity. EPSS data is not available, but the flaw is in a local context and would not be exploitable remotely. The entry is not listed in CISA\u2019s KEV catalog. Attackers require local access to the target system, the ability to create and open an LSM map file, and the application must be running to trigger the overflow. Successful exploitation results in code execution, elevating threat to full system compromise."}}}}, "created": "2026-04-06T20:26:56.924998+00:00", "updated": "2026-04-06T21:57:32.876672+00:00", "vendors": ["10-strike", "10-strike$PRODUCT$strike_lanstate"]}