CVE-2019-25634

Katalog CVE

CVSS 7.8 · High EPSS 0,26%

Kerentanan Out-of-bounds Write pada 4mhz base64 decoder. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

Base64 Decoder 1.1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by triggering a structured exception handler (SEH) overwrite. Attackers can craft a malicious input file that overflows a buffer, overwrites the SEH chain with a POP-POP-RET gadget address, and uses an egghunter payload to locate and execute shellcode for code execution.

Rincian

Terbit di NVD

24 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

0,26% peluang dieksploitasi; lebih tinggi dari 16,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/base64-decoder-local-buffer-overflow-seh-egghunter advisory pihak ketiga
• https://www.exploit-db.com/exploits/46625 exploit
• http://4mhz.de/b64dec.html product · release notes
• http://4mhz.de/download.php?file=b64dec-1-1-2.zip product