CVE-2019-25564

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-25564
PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Group field. Attackers can paste a buffer overflow payload into the Group property field and click Ok to trigger an application crash.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi Product
https://www.exploit-db.com/exploits/46709 Exploit Third Party Advisory VDB Entry
https://www.uvnc.com/home.html Product
https://www.vulncheck.com/advisories/pchelpwarev2-denial-of-service-via-group-field Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:uvnc:pchelpwarev2:1.0.0.5:*:*:*:*:*:*:*
History

24 Mar 2026, 20:43

Type Values Removed Values Added
First Time Uvnc pchelpwarev2
Uvnc
CPE cpe:2.3:a:uvnc:pchelpwarev2:1.0.0.5:*:*:*:*:*:*:*
References () http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi - () http://www.uvnc.eu/download/pchw2/PCHelpWareV2.msi - Product
References () https://www.exploit-db.com/exploits/46709 - () https://www.exploit-db.com/exploits/46709 - Exploit, Third Party Advisory, VDB Entry
References () https://www.uvnc.com/home.html - () https://www.uvnc.com/home.html - Product
References () https://www.vulncheck.com/advisories/pchelpwarev2-denial-of-service-via-group-field - () https://www.vulncheck.com/advisories/pchelpwarev2-denial-of-service-via-group-field - Third Party Advisory
Summary
  • (es) PCHelpWareV2 1.0.0.5 contiene una vulnerabilidad de denegación de servicio que permite a atacantes locales bloquear la aplicación al proporcionar una cadena excesivamente larga en el campo Grupo. Los atacantes pueden pegar una carga útil de desbordamiento de búfer en el campo de propiedad Grupo y hacer clic en Aceptar para provocar un bloqueo de la aplicación.

21 Mar 2026, 13:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-21 13:16

Updated : 2026-03-24 20:43

NVD link : CVE-2019-25564

Mitre link : CVE-2019-25564

CVE.ORG link : CVE-2019-25564

JSON object : View

Products Affected

uvnc

  • pchelpwarev2
CWE
CWE-787

Out-of-bounds Write