CVE-2019-25637 - Vulnerability Analysis

Overview

X-NetStat Pro 5.63 contains a local buffer overflow caused by a 264-byte overflow in HTTP Client or Rules functionality, letting local attackers execute arbitrary code by overwriting the EIP register, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of X-NetStat Pro.

References

• https://www.vulncheck.com/advisories/x-netstat-pro-local-buffer-overflow-via-egghunter
• https://freshsoftware.com
• https://www.exploit-db.com/exploits/46596

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner