Approved changes feed: RSS · Atom
cpe:2.3:a:armcode:arm_whois:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Armcode (c81d4bab-16d8-5a76-8816-88e4f1756fee) |
|---|---|
| Product | Arm Whois (97a92e42-885e-529c-864f-0166b61c8a75) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-25432 |
vulnerable | 2026-06-08 05:11:29.898121 |
Arm Whois 3.11 Buffer Overflow via ASLR Bypass
HIGH (8.4)
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft a malicious input file with a 672-byte offset to overwrite the nSEH and SEH pointers, enabling code execution through exception handler hijacking.
Published: 2026-06-01T21:00:22.371Z
Updated: 2026-06-02T12:33:26.285Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25427 |
vulnerable | 2026-06-08 05:11:29.894804 |
Arm Whois 3.11 Buffer Overflow via SEH Overwrite
CRITICAL (9.8)
Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote attackers to execute arbitrary code by supplying oversized input to the IP address or domain field. Attackers can craft malicious input exceeding 658 bytes with shellcode to overwrite the structured exception handler and gain command execution when the application processes the input.
Published: 2026-06-01T21:00:18.785Z
Updated: 2026-06-02T13:15:13.086Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25423 |
vulnerable | 2026-06-08 05:11:29.891921 |
Arm Whois 3.11 Denial of Service via Buffer Overflow
MEDIUM (6.2)
Arm Whois 3.11 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized input string. Attackers can paste a malicious buffer of 700 bytes into the IP address or domain input field to trigger a denial of service condition.
Published: 2026-05-30T14:55:26.966Z
Updated: 2026-06-01T13:48:42.774Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.