CVE-2018-25222 - Vulnerability Analysis

Overview

SC v7.16 contains a stack-based buffer overflow caused by oversized input exceeding buffer boundaries, letting local attackers execute arbitrary code by overwriting the instruction pointer, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of SC.

References

• https://www.exploit-db.com/exploits/44279
• https://www.vulncheck.com/advisories/sc-stack-based-buffer-overflow-remote-code-execution

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner