VULNERABILITY INTELLIGENCE
CVE-2019-25330
CVSS score7.5 HIGH
EPSS probability0.36%
CISA KEVNot currently listed
Published2026-02-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
SurfOffline Professional 2.2.0.103 contains a structured exception handler (SEH) overflow vulnerability that allows attackers to crash the application by manipulating the project name input. Attackers can generate a malicious payload of 382 'A' characters followed by specific byte sequences to trigger a denial of service condition and overwrite SEH registers.
Weakness classification
- disclosure@vulncheck.com: CWE-121