CVE-2019-25603

HIGH

TuneClone 2.20 Structured Exception Handler Buffer Overflow

Title source: cna
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-25603. PoCs published by Achilles.

AI-analyzed exploit summary This exploit leverages a local SEH overflow in TuneClone 2.20 by crafting a malicious payload that triggers a bind shell on port 3110 when pasted into the 'Enter License Code' field. The payload includes a structured buffer overflow with NOP sleds, SEH bypass, and Shikata Ga Nai-encoded shellcode.

Description

TuneClone 2.20 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license code string. Attackers can craft a payload with a controlled buffer, NSEH jump instruction, and SEH handler address pointing to a ROP gadget, then paste it into the license code field to trigger code execution and establish a bind shell.

Exploits (1)

exploitdb WORKING POC
by Achilles · pythonlocalwindows
https://www.exploit-db.com/exploits/47012

This exploit leverages a local SEH overflow in TuneClone 2.20 by crafting a malicious payload that triggers a bind shell on port 3110 when pasted into the 'Enter License Code' field. The payload includes a structured buffer overflow with NOP sleds, SEH bypass, and Shikata Ga Nai-encoded shellcode.

Classification
Working Poc 100%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: TuneClone 2.20
No auth needed
Prerequisites: TuneClone 2.20 installed on Windows XP SP3 EN · Ability to paste malicious input into the license code field
devstral-2 · analyzed Mar 22, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit exploit
ExploitDB-47012
https://www.exploit-db.com/exploits/47012
Product product
Official Product Homepage
http://www.tuneclone.com/
Product product
Product Reference
http://www.tuneclone.com/tuneclone_setup.exe
Third Party Advisory third-party-advisory
VulnCheck Advisory: TuneClone 2.20 Structured Exception Handler Buffer Overflow
https://www.vulncheck.com/advisories/tuneclone-structured-exception-handler-buffer-overflow

Scores

CVSS v3 8.4
EPSS 0.0019
EPSS Percentile 8.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (1)
TuneClone/TuneClone 2.20
Published Mar 22, 2026
Tracked Since Mar 22, 2026