CVE-2019-25476
MEDIUMOutlook Password Recovery 2.10 - Buffer Overflow
Title source: llmDescription
Outlook Password Recovery 2.10 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can create a malicious text file containing 6000 bytes of data and paste it into the User Name and Registration Code field to trigger a denial of service condition.
Exploits (1)
exploitdb
WORKING POC
by Velayutham Selvaraj_ Praveen Thiyagarayam · pythondoswindows
https://www.exploit-db.com/exploits/47309
Scores
CVSS v3
6.2
EPSS
0.0002
EPSS Percentile
5.0%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
poc
Automatable
no
Technical Impact
partial
Details
CWE
CWE-787
Status
published
Products (1)
Top-Password/Outlook Password Recovery Denial of Service Exploit
2.10
Published
Mar 11, 2026
Tracked Since
Mar 12, 2026