CVE-2019-25631 is a high-severity structured exception handling buffer overflow vulnerability affecting AIDA64 Business version 5.99.4900. This flaw allows a local attacker to execute arbitrary code with application privileges by injecting malicious shellcode into the SMTP display name field or report wizard, overwriting SEH pointers. Rated 8.4 CVSS (High), it has a local attack vector and low attack complexity, leading to high impact on confidentiality, integrity, and availability. Despite its severity, there is currently no known public exploit code, it is not listed on the KEV catalog, and community discussion is minimal, suggesting a low probability of active exploitation.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
5.99.4900CPE matchmatch criteria | cpe:2.3:a:aida64:aida64:5.99.4900:*:*:*:business:*:*:* |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.5 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.