CVE-2019-25628

critical · 9.3

Download Accelerator Plus DAP 10.0.6.0 contains a structured exception handler buffer overflow vulnerability that allows remote attackers to execute arbitrary code by crafting malicious URLs. Attackers can create specially crafted URLs with overflowing buffer data that overwrites SEH pointers and executes embedded shellcode when imported through the application's web page import functionality.

9.3

CVSS

0.8%

EPSS (exploit prob.)

55th

EPSS percentile

2026-03-24

Published

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weaknesses

CWE-787

References

http://www.speedbit.com/dap/
http://www.speedbit.com/dap/download/downloading.asp
https://www.exploit-db.com/exploits/46673
https://www.vulncheck.com/advisories/download-accelerator-plus-dap-seh-buffer-overflow

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2019-25628