VULNERABILITY INTELLIGENCE
CVE-2019-25475
CVSS score6.9 MEDIUM
EPSS probability0.13%
CISA KEVNot currently listed
Published2026-03-11
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description
SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can inject 6000 bytes of data into the User Name and Registration Code field to trigger a denial of service condition.
Weakness classification
- CWE-787: Out-of-bounds Write