CVE-2019-25628 - Vulnerability Analysis

Overview

Download Accelerator Plus DAP 10.0.6.0 contains a buffer overflow vulnerability in structured exception handler caused by improper handling of crafted URLs, letting remote attackers execute arbitrary code, exploit requires crafted URL import via web page.

Severity & Score

Impact

Remote attackers can execute arbitrary code, potentially taking full control of the affected system.

Mitigation

Update to the latest version of Download Accelerator Plus DAP.

References

• http://www.speedbit.com/dap/
• http://www.speedbit.com/dap/download/downloading.asp
• https://www.exploit-db.com/exploits/46673
• https://www.vulncheck.com/advisories/download-accelerator-plus-dap-seh-buffer-overflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner