PT-2026-24779 · Undefined · Undefined

Blackleitus · Publicado 2026-03-11 · Atualizado 2026-03-11 · CVE-2019-25485

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Média

Vetor base

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions R versions 3.4.4

Description The software contains a buffer overflow issue in the language menu field within GUI Preferences. This allows local attackers to bypass Data Execution Prevention (DEP) and Address Space Layout Randomization (ASLR) protections. Attackers can inject a crafted payload through the 'Language for menus' preference to trigger a structured exception handler chain pivot and execute arbitrary shellcode with application privileges.

Recommendations Update to a newer version that addresses this vulnerability. As a temporary workaround, consider avoiding modification of the 'Language for menus' preference within GUI Preferences.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-25485

Produtos afetados

Undefined

Referências · 4

• 🔥 https://exploit-db.com/exploits/47122 · Exploit
• https://vulncheck.com/advisories/r-windows-x-buffer-overflow-seh-dep-aslr-bypass · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25485 · Nota de Segurança
• https://vulncheck.com/advisories/r-windows-x64-buffer-overflow-seh-dep-aslr-bypass · Nota