CVE-2019-25633
HIGHAIDA64 Extreme 5.99.4900 SEH Buffer Overflow via EggHunter
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25633. PoCs published by Peyman Forouzan.
AI-analyzed exploit summary This is a functional SEH-based buffer overflow exploit for AIDA64 Extreme 5.99.4900, leveraging an EggHunter technique to achieve remote code execution (calc.exe) by overwriting the SEH handler and using a stack pivot.
Description
AIDA64 Extreme 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input through the email preferences and report wizard interfaces. Attackers can inject crafted payloads into the Display name field and Load from file parameter to trigger the overflow and execute shellcode with application privileges.
Exploits (1)
This is a functional SEH-based buffer overflow exploit for AIDA64 Extreme 5.99.4900, leveraging an EggHunter technique to achieve remote code execution (calc.exe) by overwriting the SEH handler and using a stack pivot.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H