CVE Intelligence
Analysis AI-assisted

CVE-2019-25232: NetPCLinker Buffer Overflow in Clients Control Panel DNS/IP Field

CVE-2019-25232 is a buffer overflow in the DNS/IP field of the Clients Control Panel in NetPCLinker 1.0.0.0, as described in the record. NVD and the CNA list a CVSS 3.1 base score of 9.8 (critical), and the record does not include fixed versions. No confirmed exploitation appears in the sources consulted, and the CVE is not listed in CISA KEV.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2019-25232 affects NetPCLinker 1.0.0.0. According to the record, the DNS/IP input in the Clients Control Panel does not handle oversized data safely, which corresponds to a classic buffer overflow (CWE-120). The record was published on 2026-01-30 and its source status is Deferred.

Impact

  • The record describes arbitrary code execution through shellcode when a new client is added.
  • The CVSS 3.1 base score is 9.8 (critical), with a network attack vector and no privileges or user interaction required, according to the vector in the record.
  • The CNA also lists a CVSS 4.0 score of 8.4.

Affected products and versions

  • Product: NetPCLinker, version 1.0.0.0 as stated in the description.
  • The record does not include a structured list of affected or fixed versions.
  • Project page referenced: SourceForge NetPCLinker project.

Exploitation status

The CVE is not listed in the CISA KEV catalog in this record, and no confirmed exploitation in the wild appears in the sources consulted. The references include an Exploit-DB entry, but this record does not establish how it is used.

Remediation and mitigation

  • Check the project page and vendor channels for an updated release, since the record provides no fixed version.
  • Restrict access to the control panel to trusted networks and administrative accounts.
  • Limit who can add or modify client entries until a fixed version is verified.
  • Review the VulnCheck advisory for additional context.

Detection guidance

  • Inventory systems running NetPCLinker and record installed versions.
  • Review logs and configuration for unexpected or unusually long DNS/IP values in client entries.
  • Monitor for abnormal crashes or restarts of the NetPCLinker process, which can indicate memory corruption attempts.

Limitations of the available information

  • The record includes no fixed version, patch, or vendor statement.
  • No EPSS score or SSVC data is available.
  • Whether versions other than 1.0.0.0 are affected is unknown.

Frequently asked questions

What product is affected by CVE-2019-25232?

The record describes NetPCLinker version 1.0.0.0. It does not list other affected versions.

Is this CVE known to be actively exploited?

The CVE is not listed in CISA KEV in this record, and no confirmed exploitation in the wild appears in the sources consulted.

Is a fixed version available?

The record does not list a fixed version. The absence of a listed fix does not confirm that none exists, so check the project and vendor channels.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.