Buffer Overflow Vulnerability in Arm Whois 3.11 by Arm Code
CVE-2018-25432

8.6HIGH

Key Information:

Vendor

Armcode

Status
Arm Whois
Vendor
CVE Published:
1 June 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2018-25432?

The Arm Whois version 3.11 is susceptible to a buffer overflow vulnerability that enables local attackers to execute arbitrary code. This security flaw occurs when an attacker crafts a malicious input file with a specific 672-byte offset capable of overwriting critical pointers in the structured exception handler. By doing so, attackers can manipulate the execution flow of the program through exception handler hijacking, potentially leading to unauthorized access or system compromise.

Affected Version(s)

Arm Whois 3.11

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2018-25432 - Proof of Concept

References

https://www.exploit-db.com/exploits/45907
exploit
http://www.armcode.com
product
http://www.armcode.com/downloads/arm-whois.exe
product

CVSS V4

Score:
8.6
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

zephyr
.