Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2019-25365

ChaosPro 2.0 - Buffer Overflow

Description

ChaosPro 2.0 contains a buffer overflow vulnerability in the configuration file path handling that allows attackers to execute arbitrary code by overwriting the Structured Exception Handler. Attackers can craft a malicious configuration file with carefully constructed payload to overwrite memory and gain remote code execution on vulnerable Windows XP systems.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Chaospro ChaosPro

  • 2.0affected

References