CVE-2019-25660
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
LanHelper 1.74 has a local buffer overflow in the Form Send Message feature. An attacker can crash the application by pasting 6000 bytes into the message text field.
Risk Assessment
This vulnerability allows a local attacker to cause a denial of service (DoS) by crashing the application, potentially disrupting user work.
Recommendation
Update LanHelper to the latest version if available. Restrict application access to trusted users only.
Original NVD description (English source)
LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service condition.