CVE-2019-25628
Last modified
CVE-2019-25628 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.. EPSS estimates a 0.80% chance of exploitation in the next 30 days.
Description
Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Speedbit | Download Accelerator Plus DAP | 10.0.6.0 # |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2019-25628?
How severe is CVE-2019-25628?
How do I fix CVE-2019-25628?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-25622Paint Studio 2.17 contains a denial of service vulnerability…5.5
- CVE-2019-25623Luminance Studio 2.17 contains a denial of service vulnerabi…5.5
- CVE-2019-25624Liquid Studio 2.17 contains a denial of service vulnerabilit…5.5
- CVE-2019-25625Blob Studio 2.17 contains a denial of service vulnerability …5.5
- CVE-2019-25626River Past Cam Do 3.7.6 contains a local buffer overflow vul…7.8
- CVE-2019-25627FlexHEX 2.71 contains a local buffer overflow vulnerability …7.8
- CVE-2019-25629AIDA64 Extreme 5.99.4900 contains a structured exception han…7.8
- CVE-2019-25630PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulne…8.8
- CVE-2019-25631AIDA64 Business 5.99.4900 contains a structured exception ha…7.8
- CVE-2019-25632phpFileManager 1.7.8 contains a local file inclusion vulnera…5.5
- CVE-2019-25633AIDA64 Extreme 5.99.4900 contains a structured exception han…7.8
- CVE-2019-25634Base64 Decoder 1.1.2 contains a stack-based buffer overflow …7.8
Are you affected by CVE-2019-25628?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST