CVE-2019-25627 - Vulnerability Analysis

Overview

FlexHEX 2.71 contains a buffer overflow caused by improper handling of the Stream Name field, letting local attackers execute arbitrary code via SEH overflow, exploit requires crafted input in Stream Name dialog.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of FlexHEX.

References

• http://www.flexhex.com
• http://www.flexhex.com/download/flexhex_setup.exe
• https://www.exploit-db.com/exploits/46665
• https://www.vulncheck.com/advisories/flexhex-local-buffer-overflow-via-seh-unicode

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner