PT-2026-30469 · Hainsoft · Lanhelper

Rafael Pedrero · Published 2026-04-05 · Updated 2026-04-05 · CVE-2019-25660

NVD

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings. Attackers can exploit the Form Send Message feature by pasting 6000 bytes of data into the Message text field to trigger a denial of service condition.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-25660

Affected Products

Lanhelper

References · 4

• 🔥 https://exploit-db.com/exploits/46295 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25660 · Security Note
• http://hainsoft.com · Note
• https://vulncheck.com/advisories/lanhelper-denial-of-service-via-buffer-overflow · Note