CVE-2019-25612

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2019-25612", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-03-22T13:21:59.416Z", "datePublished": "2026-03-22T13:38:45.511Z", "dateUpdated": "2026-07-28T01:46:55.642Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-07-28T01:46:55.642Z"}, "title": "Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path", "descriptions": [{"lang": "en", "value": "Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an alphanumeric encoded payload in the Folder Path field. Attackers can trigger the vulnerability through the System Compare feature by pasting a crafted buffer overflow payload into the left-hand side Folder Path field and clicking the scale icon to execute shellcode with application privileges."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Out-of-bounds Write", "cweId": "CWE-787", "type": "CWE"}]}], "affected": [{"vendor": "Admin-Express", "product": "Admin-Express", "versions": [{"version": "1.2.5.485", "status": "affected"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:express:express:1.2.5.485:*:*:*:*:android:*:*"}]}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "baseScore": 8.5, "baseSeverity": "HIGH", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS"}, {"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS"}], "references": [{"url": "https://www.exploit-db.com/exploits/46805", "name": "ExploitDB-46805", "tags": ["exploit"]}, {"url": "https://admin-express.en.softonic.com/", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "https://admin-express.en.softonic.com/download", "name": "Product Reference", "tags": ["product"]}, {"name": "VulnCheck Advisory: Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path", "tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/admin-express-local-seh-buffer-overflow-via-folder-path"}], "credits": [{"lang": "en", "value": "Connor McGarr (https://connormcgarr.github.io)", "type": "finder"}], "x_generator": {"engine": "vulncheck"}, "datePublic": "2019-05-07T00:00:00.000Z"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-24T14:08:30.727608Z", "id": "CVE-2019-25612", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-24T15:14:32.531Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2019-25612", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-03-24T14:08:30.727608Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-24T14:08:31.800Z"}}], "cna": {"title": "Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path", "credits": [{"lang": "en", "type": "finder", "value": "Connor McGarr (https://connormcgarr.github.io)"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.5, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}}, {"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Admin-Express", "product": "Admin-Express", "versions": [{"status": "affected", "version": "1.2.5.485"}]}], "datePublic": "2019-05-07T00:00:00.000Z", "references": [{"url": "https://www.exploit-db.com/exploits/46805", "name": "ExploitDB-46805", "tags": ["exploit"]}, {"url": "https://admin-express.en.softonic.com/", "name": "Official Product Homepage", "tags": ["product"]}, {"url": "https://admin-express.en.softonic.com/download", "name": "Product Reference", "tags": ["product"]}, {"url": "https://www.vulncheck.com/advisories/admin-express-local-seh-buffer-overflow-via-folder-path", "name": "VulnCheck Advisory: Admin Express 1.2.5.485 Local SEH Buffer Overflow via Folder Path", "tags": ["third-party-advisory"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an alphanumeric encoded payload in the Folder Path field. Attackers can trigger the vulnerability through the System Compare feature by pasting a crafted buffer overflow payload into the left-hand side Folder Path field and clicking the scale icon to execute shellcode with application privileges."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-787", "description": "Out-of-bounds Write"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:express:express:1.2.5.485:*:*:*:*:android:*:*", "vulnerable": true}], "operator": "OR"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-07-28T01:46:55.642Z"}}}, "cveMetadata": {"cveId": "CVE-2019-25612", "state": "PUBLISHED", "dateUpdated": "2026-07-28T01:46:55.642Z", "dateReserved": "2026-03-22T13:21:59.416Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-03-22T13:38:45.511Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "Admin-Express", "vendor": "Admin-Express", "versions": [{"status": "affected", "version": "1.2.5.485"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Admin Express 1.2.5.485 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an alphanumeric encoded payload in the Folder Path field. Attackers can trigger the vulnerability through the System Compare feature by pasting a crafted buffer overflow payload into the left-hand side Folder Path field and clicking the scale icon to execute shellcode with application privileges."}, {"lang": "es", "value": "Admin Express 1.2.5.485 contiene una vulnerabilidad de desbordamiento de b\u00fafer de manejo de excepciones estructurado local que permite a atacantes locales ejecutar c\u00f3digo arbitrario al proporcionar una carga \u00fatil codificada alfanum\u00e9ricamente en el campo 'Folder Path'. Los atacantes pueden activar la vulnerabilidad a trav\u00e9s de la funci\u00f3n 'System Compare' pegando una carga \u00fatil de desbordamiento de b\u00fafer manipulada en el campo 'Folder Path' del lado izquierdo y haciendo clic en el icono de escala para ejecutar shellcode con privilegios de aplicaci\u00f3n."}], "id": "CVE-2019-25612", "lastModified": "2026-06-17T02:32:47.663", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "PASSIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2019-25612", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-03-24T14:08:30.727608Z", "version": "2.0.3"}}]}, "published": "2026-03-22T14:16:29.550", "references": [{"source": "disclosure@vulncheck.com", "url": "https://admin-express.en.softonic.com/"}, {"source": "disclosure@vulncheck.com", "url": "https://admin-express.en.softonic.com/download"}, {"source": "disclosure@vulncheck.com", "url": "https://www.exploit-db.com/exploits/46805"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/admin-express-local-seh-buffer-overflow-via-folder-path"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "1.2.5.485"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "Admin-Express", "source": "cna", "vendor": "Admin-Express"}, "product": "admin-express", "vendor": "admin-express"}], "analysis": {"en": {"generated_at": "2026-03-22T14:37:56.438572+00:00", "value": {"mitigation_remediation": ["Update to the latest version of Admin Express that addresses the SEH buffer overflow.", "If a patch is not yet available, contact the vendor for an update or advisory.", "Restrict local access to the application to trusted users only.", "Avoid using the System Compare feature until the issue is resolved.", "If the application is not critical, consider uninstalling or disabling it."], "summary": {"action": "Immediate Patch", "impact": "Local Arbitrary Code Execution"}, "threat_synthesis": {"affected_systems": "Admin Express Software, version 1.2.5.485. This release is affected; no other versions are listed in the advisory. The vulnerability applies to installations of the desktop application on Windows platforms.", "description_and_impact": "The vulnerability is a local structured exception handling (SEH) buffer overflow that is triggered by supplying an alphanumeric encoded payload in the Folder Path field. The flaw allows an attacker who can run the application to execute arbitrary code with the privileges of the application. The exploit path involves using the System Compare feature; the attacker pastes the malicious payload into the left\u2011hand side Folder Path field and clicks the scale icon to launch the shellcode.", "risk_and_exploitability": "The CVSS score of 8.5 reflects a high\u2011severity local exploit requiring the attacker to have access to the affected machine. Because the vulnerability is local, it does not pose an immediate remote attack surface, and EPSS data is not available. The flaw is not currently listed in CISA's KEV catalog. Exploitation requires an attacker already present on the system or with local user credentials; the attacker can then run arbitrary code with application privileges. Given the high impact of code execution and the popularity of the application, the risk remains substantial. Administrators should treat it as a high\u2011severity local privilege escalation and coordinate patching as soon as possible."}}}}, "created": "2026-03-23T09:46:08.875997+00:00", "updated": "2026-03-25T14:46:04.247057+00:00", "vendors": ["admin-express", "admin-express$PRODUCT$admin-express"]}