CVE-2018-25261 - Vulnerability Analysis

Overview

Iperius Backup 5.8.1 contains a buffer overflow caused by improper handling of a crafted file path in the structured exception handling mechanism, letting local attackers execute arbitrary code with application privileges, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code with application privileges, potentially compromising the system.

Mitigation

Update to the latest version of Iperius Backup.

References

• https://www.vulncheck.com/advisories/iperius-backup-local-buffer-overflow-seh
• https://www.exploit-db.com/exploits/46059
• https://www.iperiusbackup.com

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner