What’s Vulnerable › Vulnerabilities
CVE-2018-25254: NICO-FTP 3.0.1.19 Buffer Overflow SEH
- Severity: critical (CVSS 9.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2026-04-04 · updated 2026-10-27
- Weakness: CWE-787
Description
NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending crafted FTP commands. Attackers can connect to the FTP service and send oversized data in response handlers to overwrite SEH pointers and redirect execution to injected shellcode.
Affected products
References
- https://en.softonic.com/download/nico-ftp/windows/post-download
- https://www.exploit-db.com/exploits/45442
- https://www.vulncheck.com/advisories/nico-ftp-buffer-overflow-seh
Get alerted when CVE-2018-25254 or the next vulnerability affects your stack