CVE-2019-25321

Katalog CVE

CVSS 9.8 · Critical EPSS 0,78%

Kerentanan Stack-based Buffer Overflow pada internet-soft ftp navigator. Skor CVSS 3.1 9.8 (Critical) menurut vulncheck.com.

Deskripsi (NVD)

FTP Navigator 8.03 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload that triggers a buffer overflow when pasted into the Custom Command textbox, enabling remote code execution and launching the calculator as proof of concept.

Rincian

Terbit di NVD

12 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,78% peluang dieksploitasi; lebih tinggi dari 54,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/47812 exploit · advisory pihak ketiga · vdb entry
• https://www.vulncheck.com/advisories/ftp-navigator-stack-overflow-seh advisory pihak ketiga
• https://www.exploit-db.com/exploits/47794 exploit · vdb entry
• http://www.internet-soft.com/ product