Intercom, Inc. vulnerabilities
Published CVEs affecting Intercom, Inc. products: 3 record(s), with severity, exploitation and fixes.
CVE-2025-64693
Critical · 9.8
CWE-122 Nov 25, 2025
Heap-based Buffer Overflow in Intercom, Inc. Security Point (Windows) of MaLion
Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.
CVE-2025-62691
Critical · 9.8
CWE-121 Nov 25, 2025
Stack-based Buffer Overflow in Intercom, Inc. Security Point (Windows) of MaLion
Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.
CVE-2025-59485
Low · 3.3
CWE-276 Nov 25, 2025
Incorrect Default Permissions in Intercom, Inc. Security Point (Windows) of MaLion
Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a specially crafted DLL file, arbitrary code could be executed with SYSTEM privilege.