CVE-2018-25256 MEDIUM

CVE-2018-25256: IP TOOLS 2.50 Local Buffer Overflow Denial of Service

Vendor Ks-Soft
Product IP TOOLS
Weakness CWE-787
Published April 5, 2026
Last update April 6, 2026
View on NVD All CVEs

CVSS base score

6.8/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data into the 'From Addr' and 'To Addr' fields and trigger the crash by clicking the Start button, causing denial of service and SEH overwrite.

Key dates

02Disclosure timeline

April 5, 2026 CVE published
April 6, 2026 Record updated