RGui 3.5.0 Local Buffer Overflow SEH DEP Bypass
Vulnerability Description
RGui 3.5.0 contains a local buffer overflow vulnerability in the GUI preferences dialog that allows attackers to bypass DEP protections through structured exception handling exploitation. Attackers can craft malicious input in the Language for menus and messages field to trigger a stack-based buffer overflow, execute a ROP chain for VirtualAlloc allocation, and achieve arbitrary code execution.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-25258
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- bzyo
References
Affected Vendor
R-Project
View all reports →