CVE-2019-25626: river past cam do project river past cam do…

csirt@kutim:~/threat-intel/cve/CVE-2019-25626

CVSS 7.8 · High EPSS 0,24%

Kerentanan Unrestricted Upload of File with Dangerous Type pada river past cam do project river past cam do. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to execute arbitrary code by supplying a malicious activation code string. Attackers can craft a buffer containing 608 bytes of junk data followed by shellcode and SEH chain overwrite values to trigger code execution when the activation dialog processes the input.

Rincian

Terbit di NVD: 24 Maret 2026
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-434: Unrestricted Upload of File with Dangerous Type
EPSS (30 hari): 0,24% peluang dieksploitasi; lebih tinggi dari 14,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
river past cam do project	river past cam do	Semua versi hingga 3.7.6

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://www.vulncheck.com/advisories/river-past-cam-do-local-buffer-overflow-in-activation-code advisory pihak ketiga
https://www.exploit-db.com/exploits/46670 exploit · vdb entry
http://www.flexhex.com not applicable
https://en.softonic.com/download/river-past-cam-do/windows/post-download?sl=1 product

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.