CVE-2019-25637 X-NetStat Pro 5.63 Local Buffer Overflow via EggHunter
Local attackers can execute arbitrary code via a buffer overflow in X-NetStat Pro using an egg hunter technique.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-25637?
CVE-2019-25637 is a high-severity memory corruption vulnerability in Freshsoftware NetStat Pro, published on 24 Mar 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
X-NetStat Pro 5.63 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by overwriting the EIP register through a 264-byte buffer overflow. Attackers can inject shellcode into memory and use an egg hunter technique to locate and execute the payload when the application processes malicious input through HTTP Client or Rules functionality.
Weakness: CWE-787
Which versions are affected by CVE-2019-25637?
How do I fix CVE-2019-25637?
No fix has been published for CVE-2019-25637 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-25637 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2019-25637 exists.
Sources
Also known as GHSA-69pr-r3r6-9m8h.