CVE-2018-25261

CVE-2018-25261 is a local buffer overflow vulnerability affecting Iperius Backup version 5.8.1, located within the structured exception handling mechanism. The flaw can be exploited by local attackers who craft a malicious file path in the backup job's external file location field, triggering the overflow during job execution and enabling arbitrary code execution with application-level privileges. The vulnerability carries a HIGH severity rating with a CVSS 3.1 score of 8.4. The attack requires local access with no special privileges or user interaction needed, and the impact is severe, affecting confidentiality, integrity, and availability. An attacker can leverage this flaw to achieve complete system compromise within the context of the application's execution environment. Current exploitation status indicates this vulnerability is not actively being exploited in the wild. It is not listed on the Known Exploited Vulnerabilities catalog, suggesting limited public awareness or active weaponization. The extremely low EPSS score of 0.000130000 further reflects minimal real-world exploitation activity, despite the high technical severity rating.