CVE-2018-25255CWE-787

10-Strike LANState 8.8 Local Buffer Overflow SEH

High · published April 4, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
7.7
In the wild
Unconfirmed
What it is

10-Strike LANState 8.8 contains a local buffer overflow vulnerability in structured exception handling that allows local attackers to execute arbitrary code by crafting malicious LSM map files. Attackers can create a specially formatted LSM file with a payload in the ObjCaption parameter that overflows the buffer, overwrites the SEH chain, and executes shellcode when the file is opened in the application.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00185 · 7.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-04-04T13:51Z
EPSS history
Timeline
  • 04 APR 13:51Z
    10-Strike LANState 8.8 Local Buffer Overflow SEH
    cvelistv5