← Volver a CVEs

CVE-2019-25679

HIGH

7.8

Descripcion

RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain and shellcode that triggers code execution when pasted into the Port field and the Change button is clicked.

Detalles CVE

Puntuacion CVSS v3.17.8

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioREQUIRED

Publicado4/5/2026

Ultima modificacion4/7/2026

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-787

Referencias

https://realterm.sourceforge.io/(disclosure@vulncheck.com)

https://sourceforge.net/projects/realterm/files/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/46441(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/realterm-serial-terminal-buffer-overflow-seh(disclosure@vulncheck.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.