LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the s…

LanSpy version 2.0.1.159 contains a local buffer overflow vulnerability in the scan field that allows attackers to overwrite the instruction pointer. The vulnerability can be exploited by providing oversized input with a specific payload structure of 688 bytes of padding followed by 4 bytes of controlled data. This can lead to application crashes or potentially achieve code execution. The vulnerability affects the network scanning tool LanSpy and has been assigned CVE-2018-25268.