← Zuruck zu CVEs
CVE-2019-25705
HIGH8.4
Beschreibung
Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries and paste it into the action field through the Rules dialog to trigger the overflow and overwrite the return address.
CVE Details
CVSS v3.1 Bewertung8.4
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorLOCAL
KomplexitatLOW
Erforderliche PrivilegienNONE
BenutzerinteraktionNONE
Veroffentlicht4/12/2026
Zuletzt geandert4/13/2026
Quellenvd
Honeypot-Sichtungen0
Schwachen (CWE)
CWE-787
Referenzen
http://initd.sh/(disclosure@vulncheck.com)
https://sourceforge.net/projects/echomirage.oldbutgold.p/(disclosure@vulncheck.com)
https://www.exploit-db.com/exploits/46216(disclosure@vulncheck.com)
https://www.vulncheck.com/advisories/echo-mirage-stack-buffer-overflow-via-rules-action-field(disclosure@vulncheck.com)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.