LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 22, 2026 · NIST NVD

   Detected

   LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potentially achieve code execution.

2. Jun 17, 2026 · NIST NVD

   Updated

   LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the application or potentially achieve code execution.

Affected

• cpe lizardsystems/lanspy2.0.1.159

Sources

• CVE.orgVulnerability recordCVE-2018-25268

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2018-25268

  LanSpy 2.0.1.159 contains a local buffer overflow vulnerability that allows attackers to overwrite the instruction pointer by supplying oversized input to the scan field. Attackers can craft a payload with 688 bytes of padding followed by 4 bytes of controlled data to crash the a

  nvd.nist.gov

References

• Product · lizardsystems.com
• Exploit · exploit-db.com
• Third Party Advisory · vulncheck.com