Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the directory field. Attackers can craft a malicious input file containing 271 bytes of junk data followed by a return address to execute arbitrary code with application privileges.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2018-25328 VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the di… https://www.cve.org/CVERecord?id=CVE-2018-25328
Post summary
The post delivers a concise disclosure of CVE-2018-25328—a local buffer overflow in VX Search 10.6.18—without indicating PoC availability, active exploitation, or mitigation details.
🚨*CVE* CVE-2018-25328 VX Search 10.6.18 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying an oversized string in the di… https://www.cve.org/CVERecord?id=CVE-2018-25328 ----- Traducción: CVE-2018-25328 VX … http://infoflow.cloud`
Post summary
The post announces CVE-2018-25328, describing a local buffer overflow in VX Search 10.6.18 that allows an instruction pointer overwrite, with no exploitation or mitigation information provided.