CVE-2019-25628
Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflow
- State
- Published
- Severity
- 9.3 Critical
- Published
- Mar 24, 2026
- Updated
- Mar 24, 2026
- Reserved
- Mar 24, 2026
Description
Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
Download Accelerator Plus DAPSpeedbit |
|
References
- ExploitDB-46673exploit
- Official Product Homepageproduct
- Product Referenceproduct
- VulnCheck Advisory: Download Accelerator Plus DAP 10.0.6.0 SEH Buffer Overflowthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.