CVE-2019-25629

Katalog CVE

CVSS 7.8 · High EPSS 0,22%

Kerentanan Out-of-bounds Write pada aida64. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbitrary code by supplying a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging preferences to overflow the buffer and trigger code execution when the application processes the log file path.

Rincian

Terbit di NVD

24 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/46660 exploit · advisory pihak ketiga · vdb entry
• https://www.vulncheck.com/advisories/aida64-extreme-seh-buffer-overflow-via-logging advisory pihak ketiga
• http://download.aida64.com/aida64extreme599.exe product
• https://www.aida64.com product