CVE-2018-25256CWE-787

IP TOOLS 2.50 Local Buffer Overflow Denial of Service

Medium · published April 5, 2026

CVSS v4.0
6.8
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input. Attackers can paste malicious data into the 'From Addr' and 'To Addr' fields and trigger the crash by clicking the Start button, causing denial of service and SEH overwrite.

The record
Technical detail
CVSS v4.0
6.8 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00202 · 9.7th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-04-05T20:45Z
EPSS history
Timeline
  • 05 APR 20:45Z
    IP TOOLS 2.50 Local Buffer Overflow Denial of Service
    cvelistv5