CVE-2018-25232CWE-1285

Softros LAN Messenger 9.2 Denial of Service via Log Files Location

Medium · published March 30, 2026

CVSS v4.0
6.8
EPSS
0%
Percentile
17.9
In the wild
Unconfirmed
What it is

Softros LAN Messenger 9.2 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the custom log files location field. Attackers can input a buffer of 2000 characters in the Log Files Location custom path parameter to trigger a crash when the OK button is clicked.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00269 · 17.9th percentile
Weakness
CWE-1285 · Improper Validation of Specified Index, Position, or Offset in Input
Published
2026-03-30T11:02Z
EPSS history
Timeline
  • 30 MAR 11:02Z
    Softros LAN Messenger 9.2 Denial of Service via Log Files Location
    cvelistv5