CVE-2018-25256

CVE-2018-25256 is a local buffer overflow vulnerability affecting IP TOOLS version 2.50, specifically in the SNMP Scanner component. This flaw allows local attackers to crash the application by injecting oversized data into the 'From Addr' and 'To Addr' input fields. The vulnerability results in denial of service through application crash and structured exception handler (SEH) overwrite. The vulnerability carries a CVSS 3.1 score of 5.5 (medium severity) with a local attack vector requiring user interaction but no special privileges. While the attack complexity is low and exploitation is straightforward, the impact is limited to availability disruption with no confidentiality or integrity compromise possible. The FAUCET risk score of 33.0 out of 100 indicates moderate concern within the broader vulnerability landscape. There is no evidence of active exploitation in the wild, as indicated by the KEV (Known Exploited Vulnerabilities) status of "No" and an EPSS score of 0.0002, placing this vulnerability well below average exploitation likelihood. Community attention appears minimal given its placement on the inactive Hot List. Organizations using IP TOOLS 2.50 should prioritize patching or upgrading, though this is not currently a critical remediation priority compared to actively exploited vulnerabilities.