PT-2026-30487 · Realterm · Realterm: Serial Terminal

Matteo Malvica · Publicado 2026-04-05 · Atualizado 2026-04-05 · CVE-2019-25679

NVD

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain and shellcode that triggers code execution when pasted into the Port field and the Change button is clicked.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-25679

Produtos afetados

Realterm: Serial Terminal

Referências · 5

• 🔥 https://exploit-db.com/exploits/46441 · Exploit
• https://vulncheck.com/advisories/realterm-serial-terminal-buffer-overflow-seh · Nota
• https://realterm.sourceforge.io · Nota
• https://sourceforge.net/projects/realterm/files · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-25679 · Nota de Segurança