CVE-2018-25369

Visual Ping 0.8.0.0 contains a buffer overflow vulnerability in input field handling that allows local attackers to crash the application by supplying oversized data. Attackers can inject malicious payloads exceeding 4108 bytes into the Host, Time Out, Packet Size, Pause, or Loops fields to trigger a denial of service condition.

CVSS v3 6.2 MEDIUM

6.2^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.5 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://www.itlights.com
http://www.scanwith.com/download/Free_Visual_Ping.htm
https://www.exploit-db.com/exploits/45316
https://www.vulncheck.com/advisories/visual-ping-buffer-overflow-denial-of-service

Configurations

No configuration.

History

20 Jul 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Visual Ping 0.8.0.0 contiene una vulnerabilidad de desbordamiento de búfer en el manejo de campos de entrada que permite a atacantes locales bloquear la aplicación al suministrar datos de tamaño excesivo. Los atacantes pueden inyectar cargas útiles maliciosas que excedan los 4108 bytes en los campos Host, Time Out, Packet Size, Pause o Loops para desencadenar una condición de denegación de servicio.

25 May 2026, 15:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-25 15:16

Updated : 2026-07-20 20:10

NVD link : CVE-2018-25369

Mitre link : CVE-2018-25369

CVE.ORG link : CVE-2018-25369

JSON object : View

Products Affected

No product.

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2018-25369", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2018-25369", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T12:41:04.770814Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.5}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 6.9, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "scanwith", "product": "Visual Ping", "versions": [{"status": "affected", "version": "0.8.0.0"}]}]}], "published": "2026-05-25T15:16:19.723", "references": [{"url": "http://www.itlights.com", "source": "disclosure@vulncheck.com"}, {"url": "http://www.scanwith.com/download/Free_Visual_Ping.htm", "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/45316", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/visual-ping-buffer-overflow-denial-of-service", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "Visual Ping 0.8.0.0 contains a buffer overflow vulnerability in input field handling that allows local attackers to crash the application by supplying oversized data. Attackers can inject malicious payloads exceeding 4108 bytes into the Host, Time Out, Packet Size, Pause, or Loops fields to trigger a denial of service condition."}, {"lang": "es", "value": "Visual Ping 0.8.0.0 contiene una vulnerabilidad de desbordamiento de b\u00fafer en el manejo de campos de entrada que permite a atacantes locales bloquear la aplicaci\u00f3n al suministrar datos de tama\u00f1o excesivo. Los atacantes pueden inyectar cargas \u00fatiles maliciosas que excedan los 4108 bytes en los campos Host, Time Out, Packet Size, Pause o Loops para desencadenar una condici\u00f3n de denegaci\u00f3n de servicio."}], "lastModified": "2026-07-20T20:10:00.110", "sourceIdentifier": "disclosure@vulncheck.com"}