CVE-2019-25612
Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path
- State
- Published
- Severity
- 8.5 High
- Published
- Mar 22, 2026
- Updated
- Jul 28, 2026
- Reserved
- Mar 22, 2026
Description
Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an alphanumeric encoded payload in the Folder Path field. Attackers can trigger the vulnerability through the System Compare feature by pasting a crafted buffer overflow payload into the left-hand side Folder Path field and clicking the scale icon to execute shellcode with application privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.5 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
Admin-ExpressAdmin-Express |
|
References
- ExploitDB-46805exploit
- Official Product Homepageproduct
- Product Referenceproduct
- VulnCheck Advisory: Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Paththird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.