LanSpy 2.0.1.159 Local Buffer Overflow Flaws Enable Potential Code Execution
Vulnerability Disclosure · 2 sources · Updated 4mo ago · First seen Apr 22, 2026
Two high-severity vulnerabilities, CVE-2018-25265 and CVE-2018-25268, were documented for LanSpy 2.0.1.159, affecting the application's scan functionality and exposing users to local buffer overflow attacks. The flaws were classified as CWE-787 and can let an attacker trigger memory corruption by supplying oversized input in the scan section or scan field, causing application crashes and creating a path to arbitrary code execution.
The published details indicate that CVE-2018-25265 can be exploited through structured exception handling (SEH), including egghunter-based shellcode discovery and controlled jumps, while CVE-2018-25268 allows instruction pointer overwrite with a payload consisting of 688 bytes of padding followed by 4 bytes of attacker-controlled data. Both entries were assigned high-impact CVSS v3.1 and CVSS v4.0 severity metrics, and the records reference material from LizardSystems, Exploit-DB, and VulnCheck.
