CVE-2019-25631
AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunter
- State
- Published
- Severity
- 8.6 High
- Published
- Mar 24, 2026
- Updated
- Jul 15, 2026
- Reserved
- Mar 24, 2026
Description
AIDA64 Business 5.99.4900 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH pointers with malicious shellcode. Attackers can inject egg hunter shellcode through the SMTP display name field in preferences or report wizard functionality to trigger the overflow and execute code with application privileges.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.6 High | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 8.4 High | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-787 Out-of-bounds Write
Affected Products
| Product | Versions |
|---|---|
AIDA64 BusinessAida64 |
|
References
- ExploitDB-46639exploit
- Official Product Homepageproduct
- Product Referenceproduct
- VulnCheck Advisory: AIDA64 Business 5.99.4900 SEH Buffer Overflow via EggHunterthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.