CVE-2019-25623

MEDIUM

6.2

Description

Luminance Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface. Attackers can create a text file with arbitrary character sequences and trigger the application to process the input, causing the application to become unresponsive or terminate abnormally.

Details CVE

Score CVSS v3.16.2

SeveriteMEDIUM

Vecteur CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Vecteur d'attaqueLOCAL

ComplexiteLOW

Privileges requisNONE

Interaction utilisateurNONE

Publie3/23/2026

Derniere modification3/24/2026

Sourcenvd

Observations honeypot0

Produits affectes

pixarra:luminance_studio

Faiblesses (CWE)

CWE-641

References

http://www.pixarra.com/(disclosure@vulncheck.com)

http://www.pixarra.com/uploads/9/4/6/3/94635436/tbluminancestudio_install.exe(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/46130(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/luminance-studio-denial-of-service-via-malformed-input(disclosure@vulncheck.com)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.