CVE-2019-25679
HIGHRealTerm Serial Terminal 2.0.0.70 Buffer Overflow SEH
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25679. PoCs published by Matteo Malvica.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in RealTerm: Serial Terminal 2.0.0.70 via the 'Echo Port' field, leveraging SEH overwrite to execute arbitrary shellcode. The payload includes a custom shellcode to display a MessageBox and is delivered through a crafted text file.
Description
RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain and shellcode that triggers code execution when pasted into the Port field and the Change button is clicked.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in RealTerm: Serial Terminal 2.0.0.70 via the 'Echo Port' field, leveraging SEH overwrite to execute arbitrary shellcode. The payload includes a custom shellcode to display a MessageBox and is delivered through a crafted text file.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H