CVE-2019-25661
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting, overwriting the SEH chain and corrupting exception handlers.
Risk Assessment
A local attacker can crash the application, leading to denial of service. Potential code execution in the application context is also possible.
Recommendation
Update Remote Process Explorer to a patched version or consider using an alternative tool.
Original NVD description (English source)
Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add Computer dialog. Attackers can paste a malicious string into the computer name textbox and trigger a crash by connecting to the added computer, overwriting the SEH chain and corrupting exception handlers.