nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-25358 CVE-2019-25358
HIGH
FileOptimizer 14.00.2524 - Denial of Service
Record summary
CVE-2019-25358 has a selected CVSS score of 8.7 (high); EIP currently links 1 catalogued exploit.
Description
FileOptimizer 14.00.2524 contains a denial of service vulnerability that allows attackers to crash the application by manipulating the FileOptimizer32.ini configuration file. Attackers can overwrite the TempDirectory parameter with a 5000-character buffer to cause the application to crash when opening options.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableYes
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 19, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
FileOptimizerBrowse nikkhokkho / FileOptimizer | CVE List | 14.00.2524 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBFileOptimizer 14.00.2524 - Denial of Service (PoC)ExploitDB exploitby SYANiDENot analyzed1 file
References
5FileOptimizer Vendor Homepageproduct
https://sourceforge.net/projects/nikkhokkho FileOptimizer Download Linkproduct
https://sourceforge.net/projects/nikkhokkho/files/FileOptimizer/14.00.2524/FileOptimizerSetup.exe/download ExploitDB-47586exploit
https://www.exploit-db.com/exploits/47586 VulnCheck Advisory: FileOptimizer 14.00.2524 - Denial of ServiceThird-party advisory
https://www.vulncheck.com/advisories/fileoptimizer-denial-of-service