CVE-2018-25299

Prime95 29.4b8 Local Buffer Overflow via SEH

CVSS 8.6 HIGHEPSS 0.2%CWE-120

Vexday Risk Score

41Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

CVSS 8.6EPSS 0.2%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Ciclo de vida

29 abr 2026Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Prime95 29.4b8 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by exploiting structured exception handling (SEH) mechanisms. Attackers can inject malicious payload through the optional proxy hostname field in the PrimeNet connection settings to trigger the overflow and execute system commands.

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Productos afectados

Mersenne · Prime95

PoCs públicas encontradas — 1

cve_referencewww.exploit-db.com/exploits/44649no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

https://www.exploit-db.com/exploits/44649 https://www.mersenne.org/https://www.mersenne.org/download/#download https://www.vulncheck.com/advisories/prime95-29-4b8-local-buffer-overflow-via-seh