CVE-2025-34127

A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution.

CVSS

No CVSS.

References

Link	Resource
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/achat_bof.rb
https://www.exploit-db.com/exploits/36056
https://www.vulncheck.com/advisories/achat-seh-buffer-overflow

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) Existe un desbordamiento de búfer basado en pila en Achat v0.150 en su configuración predeterminada. Al enviar un mensaje especialmente manipulado al puerto UDP 9256, un atacante puede sobrescribir el manejador de excepciones estructurado (SEH) debido a una comprobación insuficiente de los límites de la entrada proporcionada por el usuario, lo que provoca la ejecución remota de código.

16 Jul 2025, 22:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-07-16 22:15

Updated : 2026-06-17 09:13

NVD link : CVE-2025-34127

Mitre link : CVE-2025-34127

CVE.ORG link : CVE-2025-34127

JSON object : View

Products Affected

No product.

CWE

CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2025-34127", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-34127", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-07-17T14:47:58.377379Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "Achat Software", "product": "Achat Chat Server", "versions": [{"status": "affected", "version": "0.150"}], "platforms": ["Windows"], "defaultStatus": "unknown"}]}], "published": "2025-07-16T22:15:24.280", "references": [{"url": "https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/achat_bof.rb", "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/36056", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/achat-seh-buffer-overflow", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-94"}, {"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution."}, {"lang": "es", "value": "Existe un desbordamiento de b\u00fafer basado en pila en Achat v0.150 en su configuraci\u00f3n predeterminada. Al enviar un mensaje especialmente manipulado al puerto UDP 9256, un atacante puede sobrescribir el manejador de excepciones estructurado (SEH) debido a una comprobaci\u00f3n insuficiente de los l\u00edmites de la entrada proporcionada por el usuario, lo que provoca la ejecuci\u00f3n remota de c\u00f3digo."}], "lastModified": "2026-06-17T09:13:30.917", "sourceIdentifier": "disclosure@vulncheck.com"}