Arm Whois version 3.11 contains a critical stack-based buffer overflow vulnerability (CVE-2018-25427) that allows remote attackers to execute arbitrary code. The vulnerability exists in the IP address or domain field input processing. Attackers can exploit this by providing malicious input exceeding 658 bytes containing shellcode. The exploit overwrites the structured exception handler (SEH) to gain command execution. This represents a high-severity remote code execution vulnerability in the network utility application.