CVE-2019-25631

HIGH

AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter

Title source: cna

Description

AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH pointers with malicious shellcode. Attackers can inject egg hunter shellcode through the SMTP display name field in preferences or report wizard functionality to trigger the overflow and execute code with application privileges.

Exploits (1)

exploitdb WORKING POC

by Peyman Forouzan · pythonlocalwindows

https://www.exploit-db.com/exploits/46639

View Code ZIP pw:eip

References (4)

[Exploit] https://www.exploit-db.com/exploits/46639

[Product] https://www.aida64.com

[Product] https://www.aida64.com/downloads

[Third Party Advisory] https://www.vulncheck.com/advisories/aida64-business-seh-buffer-overflow-via-egghunter

Scores

CVSS v3 8.4

EPSS 0.0001

EPSS Percentile 0.4%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-787

Status published

Products (2)

aida64/aida64 5.99.4900

Aida64/AIDA64 Business 5.99.4900 #

Published Mar 24, 2026

Tracked Since Mar 24, 2026