Description
Prime95 version 29.8 build 6 contains a buffer overflow vulnerability in the user ID input field that allows remote attackers to execute arbitrary code. Attackers can craft a malicious payload and paste it into the PrimeNet user ID and proxy host fields to trigger a bind shell on port 3110.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Mersenne Research | Prime95 | 29.8 | — |
References
- ExploitDB-47802 exploit
- Vendor Homepage product
- VulnCheck Advisory: Prime95 Version 29.8 build 6 - Buffer Overflow (SEH) third-party-advisory