CVE-2018-25259 - CVE House
Back to Database
Status published High CVE-2018-25259

Terminal Services Manager 3.1 Buffer Overflow SEH

Vulnerability Description

Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by triggering structured exception handling. Attackers can craft a malicious input file with shellcode and jump instructions that overwrite the SEH handler pointer to execute calc.exe or other payloads when imported through the add computers wizard.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-25259

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • bzyo

References

More from Lizardsystems

View All →
CVE-2019-25661
Remote Process Explorer 1.0.0.16 Local Buffer Overflow DoS
Medium 6.9
CVE-2019-25545
Terminal Services Manager 3.2.1 Local Buffer Overflow Denial of Service
Medium 6.9
CVE-2018-25268
LanSpy 2.0.1.159 Local Buffer Overflow via Scan Field
High 8.6
CVE-2018-25265
LanSpy 2.0.1.159 Local Buffer Overflow
High 8.6

Affected Vendor

Lizardsystems

View all reports →

Affected Software

Terminal Services Manager
Vulnerable Versions:
3.1

Timeline

Official Publish: April 22nd, 2026
Last Modified: April 23rd, 2026
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-306

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1078 Valid Accounts
Persistence
T1136 Create Account
Persistence
T1098 Account Manipulation
Privilege Escalation
T1021 Remote Services
Lateral Movement