9.8Crítica

CVE-2019-25360Aida64 6.10.5200 - Buffer Overflow

FinalWire Ltd. Aida64 Publicada: (hace 8 meses)

Descripción

Aida64 Engineer 6.10.5200 contains a buffer overflow vulnerability in the CSV logging configuration that allows attackers to execute malicious code by crafting a specially designed payload. Attackers can exploit the vulnerability by creating a malformed log file with carefully constructed SEH (Structured Exception Handler) overwrite techniques to achieve remote code execution.

Debilidad (CWE): CWE-121

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
aida64 aida64 6.10.5200
FinalWire Ltd. Aida64 6.10.5200

Referencias y parches

Coincidencias CPE (NVD) (1)

  • cpe:2.3:a:aida64:aida64:6.10.5200:*:*:*:engineer:*:*:*