Vulnerabilidades de Intercom, Inc.
CVEs publicadas que afetam produtos de Intercom, Inc.: 3 registro(s), com severidade, exploração e correções.
CVE-2025-64693
Crítica · 9.8
CWE-122 25/11/2025
Heap-based Buffer Overflow em Intercom, Inc. Security Point (Windows) of MaLion
Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.
CVE-2025-62691
Crítica · 9.8
CWE-121 25/11/2025
Stack-based Buffer Overflow em Intercom, Inc. Security Point (Windows) of MaLion
Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.
CVE-2025-59485
Baixa · 3.3
CWE-276 25/11/2025
Incorrect Default Permissions em Intercom, Inc. Security Point (Windows) of MaLion
Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a specially crafted DLL file, arbitrary code could be executed with SYSTEM privilege.