CVE-2019-25629
HIGHAIDA64 Extreme 5.99.4900 SEH Buffer Overflow via Logging
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25629. PoCs published by Peyman Forouzan.
AI-analyzed exploit summary This exploit demonstrates a SEH-based buffer overflow in AIDA64 Extreme 5.99.4900 by crafting a malicious CSV log file that triggers arbitrary code execution (calc.exe) when loaded via the application's logging feature. The payload includes a Metasploit-generated shellcode and precise SEH/NSEH manipulation for both 32-bit and 64-bit Windows systems.
Description
AIDA64 Extreme 5.99.4900 contains a structured exception handler buffer overflow vulnerability in the logging functionality that allows local attackers to execute arbitrary code by supplying a malicious CSV log file path. Attackers can inject shellcode through the Hardware Monitoring logging preferences to overflow the buffer and trigger code execution when the application processes the log file path.
Exploits (1)
This exploit demonstrates a SEH-based buffer overflow in AIDA64 Extreme 5.99.4900 by crafting a malicious CSV log file that triggers arbitrary code execution (calc.exe) when loaded via the application's logging feature. The payload includes a Metasploit-generated shellcode and precise SEH/NSEH manipulation for both 32-bit and 64-bit Windows systems.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H