CVE-2018-25214 - Vulnerability Analysis

Overview

MegaPing contains a local buffer overflow caused by an oversized payload in the Destination Address List field of the Finger function, letting local attackers cause denial of service by crashing the application, exploit requires local access.

Severity & Score

Impact

Local attackers can crash the application causing denial of service.

Mitigation

Update to the latest version of MegaPing.

References

• http://www.magnetosoft.com/
• http://www.magnetosoft.com/downloads/win32/megaping_setup.exe
• https://www.exploit-db.com/exploits/46004
• https://www.vulncheck.com/advisories/megaping-local-buffer-overflow-denial-of-service

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner