CVE-2018-25293

Prime95 29.4b7 Denial of Service via Proxy Password Field

CVSS 6.9 MEDIUMEPSS 0.1%CWE-120

Vexday Risk Score

33Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 6.9EPSS 0.1%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Ciclo de vida

26 abr 2026Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Productos afectados

Mersenne · Prime95

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/45226no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

https://www.exploit-db.com/exploits/45226 https://www.vulncheck.com/advisories/prime95-29-4b7-denial-of-service-via-proxy-password-field http://www.mersenne.org http://www.mersenne.org/ftp_root/gimps/p95v294b7.win32.zip