PT-2026-7919 · Unknown · Domain Quester Pro

Boku · Published 2026-02-12 · Updated 2026-02-12 · CVE-2019-25319

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Domain Quester Pro version 6.02

Description Domain Quester Pro 6.02 contains a stack overflow that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload targeting the 'Domain Name Keywords' input field to trigger an access violation and potentially execute a bind shell on port 9999. A stack overflow occurs when a program attempts to write data beyond the allocated memory buffer on the call stack, potentially overwriting adjacent memory locations and causing unexpected behavior or program crashes. Structured Exception Handler (SEH) is a mechanism in Windows operating systems for handling exceptions, and overwriting these registers can allow an attacker to redirect control flow to malicious code.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2019-25319

Affected Products

Domain Quester Pro

References · 6

• 🔥 https://exploit-db.com/exploits/47825 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25319 · Security Note
• https://vulncheck.com/advisories/domain-quester-pro-stack-overflow-seh · Note
• https://t.me/cveNotify/151904 · Telegram Post
• http://internet-soft.com · Note
• https://t.me/CVEtracker/44562 · Telegram Post