Kirill Nikolaev

**Name of the Vulnerable Software and Affected Versions** SpotAuditor version 5.3.2 **Description** SpotAuditor 5.3.2 contains a local buffer overflow in the Base64 Encrypted Password tool. An attacker can execute arbitrary code by crafting a malicious payload. Specifically, a specially crafted Base64 encoded payload can trigger a Structured Exception Handler (SEH) overwrite, allowing the execution of shellcode on the vulnerable system. A Structured Exception Handler (SEH) is a mechanism in Windows operating systems for handling exceptions during program execution. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.