Iperius Backup 5.8.1 contains a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism that allows local attackers to execute …

CVE-2018-25261 affects Iperius Backup version 5.8.1, containing a local buffer overflow vulnerability in the structured exception handling (SEH) mechanism. Local attackers can exploit this by supplying a malicious file path when creating a backup job. The vulnerability is triggered through a crafted payload in the external file location field. When the backup job executes, it causes a buffer overflow that enables arbitrary code execution. The exploit runs with application privileges, allowing attackers to execute malicious code on the affected system.