CVE-2018-25219 - Vulnerability Analysis

Overview

PassFab Excel Password Recovery 8.3.1 contains a buffer overflow vulnerability caused by improper handling of the registration code field, letting local attackers execute arbitrary code by supplying a crafted payload.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version of PassFab Excel Password Recovery.

References

• https://www.exploit-db.com/exploits/46301
• https://www.passfab.com/downloads/passfab-excel-password-recovery.exe
• https://www.passfab.com/products/excel-password-recovery.html
• https://www.vulncheck.com/advisories/passfab-excel-password-recovery-seh-buffer-overflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner