← volver
CVE-2019-25637

X-NetStat Pro 5.63 Local Buffer Overflow via EggHunter

CVSS 8.6 HIGHEPSS 0.2%CWE-787
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.6EPSS 0.2%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
24 mar 2026Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer overflow. Attackers can inject shellcode into memory and use an egg hunter technique to locate and execute the payload when the application processes malicious input through HTTP Client or Rules functionality.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Productos afectados
Freshsoftware · NetStat Pro