CVE-2019-25336

Name of the Vulnerable Software and Affected Versions SpotAuditor version 5.3.2

Description SpotAuditor 5.3.2 contains a local buffer overflow in the Base64 Encrypted Password tool. An attacker can execute arbitrary code by crafting a malicious payload. Specifically, a specially crafted Base64 encoded payload can trigger a Structured Exception Handler (SEH) overwrite, allowing the execution of shellcode on the vulnerable system. A Structured Exception Handler (SEH) is a mechanism in Windows operating systems for handling exceptions during program execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.