Official Product Homepageproduct
https://admin-express.en.softonic.com/ CVE-2019-25612
HIGH
Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path
Record summary
CVE-2019-25612 has a selected CVSS score of 8.5 (high); EIP currently links 1 catalogued exploit.
Description
Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an alphanumeric encoded payload in the Folder Path field. Attackers can trigger the vulnerability through the System Compare feature by pasting a crafted buffer overflow payload into the left-hand side Folder Path field and clicking the scale icon to execute shellcode with application privileges.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactTotal
CISA Coordinator · SSVC 2.0.3 · Evaluated Mar 24, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Admin-ExpressBrowse Admin-Express / Admin-Express | CVE List | 1.2.5.485 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBAdmin Express 1.2.5.485 - 'Folder Path' Local SEH Alphanumeric Encoded Buffer OverflowExploitDB exploitby Connor McGarrNot analyzed1 file
References
5Product Referenceproduct
https://admin-express.en.softonic.com/download nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2019-25612 ExploitDB-46805exploit
https://www.exploit-db.com/exploits/46805 VulnCheck Advisory: Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder PathThird-party advisory
https://www.vulncheck.com/advisories/admin-express-local-seh-buffer-overflow-via-folder-path