CVE-2018-25254 | NICO-FTP 3.0.1.19 contains a structured exception handler bu… | CVSS 9.8 CRITICAL

Description

NICO-FTP 3.0.1.19 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by sending crafted FTP commands. Attackers can connect to the FTP service and send oversized data in response handlers to overwrite SEH pointers and redirect execution to injected shellcode.

Metadata

CVE ID: CVE-2018-25254
State: PUBLISHED
Assigner: VulnCheck
Reserved: 2026-04-04 13:29 UTC
Published: 2026-04-04 13:51 UTC
Last updated: 2026-04-06 15:28 UTC
Primary CWE: CWE-787
Out-of-bounds Write
Vendor / Product: nico-ftp / NICO-FTP
Sources: cve.org · NVD

Severity & Metrics

9.8 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: PoC
Automatable: yes
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
nico-ftp	NICO-FTP	—	3.0.1.19

Weakness (CWE)

CWE	Source	Description
CWE-787	cna	Out-of-bounds Write

CVSS scores (2)

Score	Severity	Version	Source	Vector
9.8	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.3	CRITICAL	4.0	cna	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

References (3)

ExploitDB-45442 https://www.exploit-db.com/exploits/45442
Product Reference https://en.softonic.com/download/nico-ftp/windows/post-download
VulnCheck Advisory: NICO-FTP 3.0.1.19 Buffer Overflow SEH https://www.vulncheck.com/advisories/nico-ftp-buffer-overflow-seh