LIVE · cybersecurity feed
Live wire
cve recordmedium

CVE-2019-25569

crun · realterm

Published
CVSS6.2
Severitymedium
WeaknessCWE-787
ExploitedNot in CISA KEV

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

RealTerm Serial Terminal 2.0.0.70 contains a stack-based buffer overflow vulnerability in the Echo Port field that allows local attackers to crash the application by triggering a structured exception handler (SEH) chain corruption. Attackers can craft a malicious input string with 268 bytes of padding followed by SEH overwrite values and paste it into the Port field to cause denial of service.

References

← Back to the CVE Tracker

Our coverage of CVE-2019-25569

No stories yet. This page updates automatically when we publish reporting that references CVE-2019-25569.