CVE-2018-25360

AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow vulnerability in the Trace Route host name field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious ping.txt file with shellcode and jump instructions that overwrite the SEH handler pointer to achieve code execution when the file contents are pasted into the application.

Score

CVSS 4.0 8.6 High

Status

Deferred - disclosure@vulncheck.com

Published

2026-05-25

Last modified

2026-05-26

Weaknesses

CWE-121

Affected products

• Auto Pingmaster (Agatasoft)

References

• http://agatasoft.com/
• https://www.exploit-db.com/exploits/45151
• https://www.vulncheck.com/advisories/agatasoft-auto-pingmaster-buffer-overflow-seh