CVE-2018-25307

SysGauge Pro 4.6.12 contains a local buffer overflow vulnerability in the Register function that allows local attackers to overwrite the structured exception handler by supplying a crafted unlock key. Attackers can inject shellcode through the Unlock Key field during registration to execute arbitrary code with application privileges.

Score

CVSS 4.0 8.6 High

Status

Deferred - disclosure@vulncheck.com

Published

2026-04-29

Last modified

2026-07-15

Weaknesses

CWE-120

Affected products

• Sysgauge (Flexense)

References

• https://www.exploit-db.com/exploits/44455
• https://www.vulncheck.com/advisories/sysgauge-pro-local-buffer-overflow-seh