CVE-2018-25266

Angry IP Scanner version 3.5.3 contains a buffer overflow vulnerability in its preferences dialog that can be exploited by local attackers to cause application denial of service. The flaw allows an attacker to crash the application by inserting an excessively large string into the display preferences field, requiring only that the attacker have local system access and user interaction capabilities. The vulnerability has a CVSS score of 6.2 (medium severity) with a local attack vector and low complexity. While the attack does not compromise confidentiality or integrity, it produces a high impact on availability by crashing the application. The attack requires no special privileges and minimal user interaction, making it relatively straightforward to execute for any local user. There is currently no evidence of active exploitation in the wild. The vulnerability does not appear on the CISA Known Exploited Vulnerabilities catalog, and the EPSS score of 0.00012 indicates minimal community attention and exploitation likelihood. The relatively low FAUCET risk score of 43/100 further suggests this is not a priority threat for immediate remediation.