PT-2026-26997 · Jetaudio · Server

Connor Mcgarr · Published 2026-03-22 · Updated 2026-03-22 · CVE-2019-25609

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions JetAudio jetCast Server version 2.0

Description A stack-based buffer overflow exists in the Log Directory configuration field. Local attackers can overwrite structured exception handling (SEH) pointers by injecting alphanumeric encoded shellcode through the Log Directory field. This process triggers an SEH exception handler, allowing the execution of arbitrary code with application privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-25609

Affected Products

Server

References · 5

• 🔥 https://exploit-db.com/exploits/46854 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25609 · Security Note
• http://jetaudio.com · Note
• http://jetaudio.com/download/5fc01426-741d-41b8-a120-d890330ec672/jetAudio/Download/jetCast/build/JCS2000.exe · Note
• https://vulncheck.com/advisories/jetaudio-jetcast-server-local-seh-buffer-overflow · Note