VULNERABILITY INTELLIGENCE

CVE-2019-25626

CVSS score8.6 HIGH
EPSS probability0.25%
CISA KEVNot currently listed
Published2026-03-24
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

River Past Cam Do 3.7.6 contains a local buffer overflow vulnerability in the activation code input field that allows local attackers to execute arbitrary code by supplying a malicious activation code string. Attackers can craft a buffer containing 608 bytes of junk data followed by shellcode and SEH chain overwrite values to trigger code execution when the activation dialog processes the input.

Weakness classification

  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references