A local buffer overflow vulnerability in SysGauge Pro 4.6.12 allows attackers to execute arbitrary code with application privileges via a crafted unlock key.

This is a local buffer overflow (CWE-120) triggered by an input validation failure in the Register function. By providing a specifically crafted string to the Unlock Key field, a local attacker can overwrite the structured exception handler (SEH) and achieve arbitrary code execution.

The ability for a local user to escalate privileges to the application level poses a significant risk to system integrity and data confidentiality. Because the application runs with elevated permissions, a successful exploit could lead to full system compromise, unauthorized data access, or the deployment of persistent malicious software. The CVSS score of 8.4 reflects the high severity of potential impact despite the requirement for local access.

Immediate Action: As there is no official patch available for this legacy version, users should immediately restrict access to the application and discontinue use of vulnerable versions if possible.

Proactive Monitoring: Security teams should monitor system logs for unusual process execution or unauthorized attempts to modify application registration files.

Compensating Controls: Ensure that the application is running in a restricted user environment with the least privilege necessary to limit the potential impact of a successful exploit.

Public Exploit Available: Yes, a functional exploit is available via the Exploit Database (EDB-ID 44455).

Due to the availability of public exploit code and the critical nature of buffer overflow vulnerabilities, this issue presents a substantial risk to environments where SysGauge Pro is deployed. Organizations must prioritize moving to a supported version or removing the affected software entirely from their systems to mitigate the potential for local privilege escalation and arbitrary code execution.