Arm Whois 3.11 contains a buffer overflow that enables local attackers to execute arbitrary code. By crafting a malicious file with a 672‑byte offset, an attacker can overwrite the structured exception handler (nSEH and SEH pointers), allowing hijacked exception handling to launch chosen payloads. This weakness is a classic stack/heap overflow (CWE‑120) that can compromise the application and, depending on the user’s privileges, the host system. The CVSS score of 8.6 marks it as a high‑severity flaw.

The vulnerability affects Armcode’s Arm Whois 3.11. No other versions or components were enumerated as susceptible, so systems running that precise version are at risk while newer releases are presumed unaffected.

The high CVSS score indicates a severe impact once exploited. EPSS is not reported, so the current probability of exploitation is unknown, but the flaw is local and requires the attacker to have ability to create and provide a malicious file to the victim. The attack path is straightforward: a local user supplies the crafted file, the application processes it, the overflow occurs, and the exception handler is hijacked to run attacker code. The vulnerability is not listed in KEV, suggesting no widely known public exploits yet, but its local nature still makes it dangerous if the application runs with elevated rights or is exposed to untrusted input.