CVE-2019-25564

Katalog CVE

CVSS 5.0 · Medium EPSS 0,42%

Kerentanan Out-of-bounds Write pada uvnc pchelpwarev2. Skor CVSS 3.1 5.0 (Medium) menurut NVD.

Deskripsi (NVD)

PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Group field. Attackers can paste a buffer overflow payload into the Group property field and click Ok to trigger an application crash.

Rincian

Terbit di NVD

21 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

5.0 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,42% peluang dieksploitasi; lebih tinggi dari 34,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/46709 exploit · advisory pihak ketiga · vdb entry
• https://www.vulncheck.com/advisories/pchelpwarev2-denial-of-service-via-group-field advisory pihak ketiga
• http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi product
• https://www.uvnc.com/home.html product