CVE-2018-25299 - Vulnerability Analysis

Overview

Prime95 29.4b8 contains a local buffer overflow caused by improper handling of the optional proxy hostname field in PrimeNet connection settings, letting attackers execute arbitrary code locally via SEH exploitation.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of Prime95.

References

• https://www.exploit-db.com/exploits/44649
• https://www.mersenne.org/
• https://www.mersenne.org/download/#download
• https://www.vulncheck.com/advisories/prime95-29-4b8-local-buffer-overflow-via-seh

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner