CVE-2018-25426

WinMTR 0.91 Denial of Service via Buffer Overflow

CVSS 8.7 HIGHEPSS 0.5%CWE-120

WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the application by sending a malformed payload file containing a large buffer of repeated characters. Attackers can create a specially crafted input file with 238 bytes of data to trigger a buffer overflow condition that causes the application to crash.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

Winmtr · WinMTR

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/45769unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.exploit-db.com/exploits/45769 https://www.vulncheck.com/advisories/winmtr-denial-of-service-via-buffer-overflow http://winmtr.net http://winmtr.net/winmtr_download/