CVE-2018-25426

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2018-25426
WinMTR 0.91 contains a denial of service vulnerability that allows attackers to crash the application by sending a malformed payload file containing a large buffer of repeated characters. Attackers can create a specially crafted input file with 238 bytes of data to trigger a buffer overflow condition that causes the application to crash.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://winmtr.net Product
http://winmtr.net/winmtr_download/ Exploit
https://www.exploit-db.com/exploits/45769 Exploit Third Party Advisory VDB Entry
https://www.vulncheck.com/advisories/winmtr-denial-of-service-via-buffer-overflow Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:winmtr:winmtr:0.91:*:*:*:*:*:*:*
History

22 Jul 2026, 07:10

Type Values Removed Values Added
Summary
  • (es) WinMTR 0.91 contiene una vulnerabilidad de denegación de servicio que permite a los atacantes bloquear la aplicación enviando un archivo de carga útil malformado que contiene un búfer grande de caracteres repetidos. Los atacantes pueden crear un archivo de entrada especialmente diseñado con 238 bytes de datos para activar una condición de desbordamiento de búfer que provoca que la aplicación se bloquee.

03 Jun 2026, 19:31

Type Values Removed Values Added
References () http://winmtr.net - () http://winmtr.net - Product
References () http://winmtr.net/winmtr_download/ - () http://winmtr.net/winmtr_download/ - Exploit
References () https://www.exploit-db.com/exploits/45769 - () https://www.exploit-db.com/exploits/45769 - Exploit, Third Party Advisory, VDB Entry
References () https://www.vulncheck.com/advisories/winmtr-denial-of-service-via-buffer-overflow - () https://www.vulncheck.com/advisories/winmtr-denial-of-service-via-buffer-overflow - Third Party Advisory
First Time Winmtr winmtr
Winmtr
CPE cpe:2.3:a:winmtr:winmtr:0.91:*:*:*:*:*:*:*

30 May 2026, 16:17

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-30 16:17

Updated : 2026-07-22 07:10

NVD link : CVE-2018-25426

Mitre link : CVE-2018-25426

CVE.ORG link : CVE-2018-25426

JSON object : View

Products Affected

winmtr

  • winmtr
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')