CVE-2019-25660
MEDIUMLanHelper 1.74 Denial of Service via Buffer Overflow
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25660. PoCs published by Rafael Pedrero.
AI-analyzed exploit summary This Python script generates a 6000-byte buffer of 'A' characters to trigger a local buffer overflow in LanHelper v1.74, causing a denial of service (DoS) when pasted into the application's message form. The provided register dump confirms the crash state with EIP overwritten by 0x41414141.
Description
LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service condition.
Exploits (1)
This Python script generates a 6000-byte buffer of 'A' characters to trigger a local buffer overflow in LanHelper v1.74, causing a denial of service (DoS) when pasted into the application's message form. The provided register dump confirms the crash state with EIP overwritten by 0x41414141.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H