← Back to CVEs
CVE-2018-25255
HIGH8.4
Description
10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application.
CVE Details
CVSS v3.1 Score8.4
SeverityHIGH
CVSS VectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorLOCAL
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published4/4/2026
Last Modified4/4/2026
Sourcenvd
Honeypot Sightings0
Weaknesses (CWE)
CWE-787
References
https://www.10-strike.com/lanstate/download.shtml(disclosure@vulncheck.com)
https://www.10-strike.com/products.shtml(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/45086(disclosure@vulncheck.com)
https://www.vulncheck.com/advisories/10-strike-lanstate-local-buffer-overflow-seh(disclosure@vulncheck.com)
IOC Correlations
No correlations recorded
This product uses data from the NVD API but is not endorsed or certified by the NVD.