Stack-based Buffer Overflow in Arm Whois by Arm Holdings
CVE-2018-25427

9.3CRITICAL

Key Information:

Vendor

Armcode

Status
Arm Whois
Vendor
CVE Published:
1 June 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2018-25427?

Arm Whois version 3.11 contains a stack-based buffer overflow that can be exploited by remote attackers to execute arbitrary code. By providing oversized input exceeding 658 bytes in the IP address or domain field, attackers can leverage this flaw to overwrite the structured exception handler, ultimately gaining command execution rights when the application processes their input. This vulnerability highlights the importance of input validation and secure coding practices to prevent unauthorized access and potential system compromise.

Affected Version(s)

Arm Whois 3.11

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2018-25427 - Proof of Concept

References

https://www.exploit-db.com/exploits/45796
exploit
http://www.armcode.com/
product
http://www.armcode.com/downloads/arm-whois.exe
product

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yair Rodríguez Aparicio (0-day DoS exploit), Semen Alexandrovich Lyhin (1-day fully working exploit)
.