CVE-2019-25705 PUBLISHED

Echo Mirage 3.1 Stack Buffer Overflow via Rules Action Field

Assigner: VulnCheck
Reserved: 05.04.2026 Published: 12.04.2026 Updated: 12.04.2026

Echo Mirage 3.1 contains a stack buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized string in the Rules action field. Attackers can create a malicious text file with a crafted payload exceeding buffer boundaries and paste it into the action field through the Rules dialog to trigger the overflow and overwrite the return address.

Metrics

CVSS Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CVSS Score: 8.6

Product Status

Vendor Sourceforge
Product Echo Mirage
Versions
  • Version 3.1 is affected

Credits

  • InitD Community finder

References

Problem Types

  • Out-of-bounds Write CWE