Skip to content
Threat Feed
high advisory

Base64 Decoder 1.1.2 Stack-Based Buffer Overflow (CVE-2019-25634)

Base64 Decoder 1.1.2 is vulnerable to a stack-based buffer overflow (CVE-2019-25634) allowing local attackers to achieve arbitrary code execution via a crafted input file that triggers an SEH overwrite.

Base64 Decoder version 1.1.2 is susceptible to a stack-based buffer overflow vulnerability, identified as CVE-2019-25634. This flaw enables a local attacker to execute arbitrary code on a vulnerable system. The vulnerability arises from insufficient bounds checking when processing input, allowing an attacker to overwrite critical parts of the stack. Successful exploitation requires the attacker to craft a malicious input file specifically designed to trigger the overflow. The impact of this…

Detection coverage 2

Detect SEH Overwrite Attempt

high

Detects attempts to overwrite the Structured Exception Handler (SEH) chain, a common technique used in buffer overflow exploits.

sigma tactics: defense_evasion techniques: T1068 sources: process_creation, windows

Base64 Decoder 1.1.2 Execution with Suspicious Arguments

medium

Detects execution of Base64 Decoder 1.1.2 with unusually long or suspicious arguments, potentially indicative of an overflow attempt.

sigma tactics: execution techniques: T1204.002 sources: process_creation, windows

Detection queries are kept inside the platform. Get full rules →