Faleemi Desktop Software 1.8.2 contains a local buffer overflow vulnerability in the Device alias field that allows local attackers to trigger a structured exce…

CVE-2018-25263 affects Faleemi Desktop Software version 1.8.2, containing a local buffer overflow vulnerability in the Device alias field. Local attackers can exploit this vulnerability by crafting malicious payloads and pasting them into the Device alias field within the Managing Log interface. The vulnerability allows attackers to trigger a structured exception handler (SEH) overwrite, leading to arbitrary code execution. A proof-of-concept exploit demonstrates calculator execution, indicating the severity of this buffer overflow flaw.