AgataSoft Auto PingMaster 1.5 contains a stack-based buffer overflow in the Trace Route host name field that allows a local attacker to execute arbitrary code by triggering structured exception handling. The flaw is triggered when a malicious ping.txt file is pasted into the application, permitting the attacker to overwrite the SEH handler pointer and run injected shellcode. The result is local code execution with the privileges of the running user, potentially leading to full system compromise if the victim operates with elevated rights.

AgataSoft Auto PingMaster 1.5

The vulnerability carries a high CVSS score of 8.6, indicating severe impact. EPSS information is not available, and the issue is not listed in the CISA KEV catalog. Exploitation requires local file creation and user interaction; an attacker must craft a malicious ping.txt file containing shellcode and SEH jump instructions and then paste its contents into the application. Once this occurs, the buffer overflow triggers and arbitrary code executes within the context of the user running the software.