CVE-2019-25633 - Vulnerability Analysis

Overview

AIDA64 Extreme 5.99.4900 contains a buffer overflow caused by improper handling of input in email preferences and report wizard interfaces, letting local attackers execute arbitrary code with application privileges, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code with application privileges, potentially leading to full system compromise.

Mitigation

Update to the latest version of AIDA64 Extreme.

References

• https://www.aida64.com
• https://www.exploit-db.com/exploits/46636
• https://www.vulncheck.com/advisories/aida64-extreme-seh-buffer-overflow-via-egghunter
• http://download.aida64.com/aida64extreme599.exe

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner