CVE-2018-25293

Prime95 29.4b7 Denial of Service via Proxy Password Field

CVSS 6.9 MEDIUMEPSS 0.1%CWE-120

Vexday Risk Score

33Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 6.9EPSS 0.1%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

26 Apr 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Affected products

Mersenne · Prime95

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/45226unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

https://www.exploit-db.com/exploits/45226 https://www.vulncheck.com/advisories/prime95-29-4b7-denial-of-service-via-proxy-password-field http://www.mersenne.org http://www.mersenne.org/ftp_root/gimps/p95v294b7.win32.zip