CVE-2019-17181

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A remote SEH buffer overflow has been discovered in IntraSrv 1.0 (2007-06-03). An attacker may send a crafted HTTP GET or HEAD request that can result in a compromise of the hosting system.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.leighb.com/intrasrv.htmExploit, Third Party Advisory
https://cxsecurity.com/issue/WLB-2019100164Exploit, Third Party Advisory
http://www.leighb.com/intrasrv.htmExploit, Third Party Advisory
https://cxsecurity.com/issue/WLB-2019100164Exploit, Third Party Advisory

Timeline

Published: Oct 28, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-171837.5Foxit Reader before 9.7 allows an Access Violation and crash if insufficient memory exists.CVE-2019-171849.8Xerox AtlaLink B8045/B8055/B8065/B8075/B8090 C8030/C8035/C8045/C8055/C8070 printers with software before 101.00x.089.22600 allow an attacker CVE-2019-171857.5In FreeRADIUS 3.0.x before 3.0.20, the EAP-pwd module used a global OpenSSL BN_CTX instance to handle all handshakes. This mean multiple thr CVE-2019-171868.8/var/WEB-GUI/cgi-bin/telnet.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication remote code execution.CVE-2019-171877.5/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for re CVE-2019-171887.2An unrestricted file upload vulnerability was discovered in catalog/productinfo/imageupload in Fecshop FecMall 2.3.4. An attacker can bypass CVE-2019-171895.4totemodata 3.0.0_b936 has XSS via a folder name.CVE-2019-17195.4A vulnerability in the web-based guest portal of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to condu CVE-2019-171907.8A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by CVE-2019-171917.5The Signal Private Messenger application before 4.47.7 for Android allows a caller to force a call to be answered, without callee user inter CVE-2019-171929.8The WebRTC component in the Signal Private Messenger application through 4.47.7 for Android processes videoconferencing RTP packets before a CVE-2019-171959.8Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash