SEH Buffer Overflows in AIDA64 Enable Local Arbitrary Code Execution

Two high-severity vulnerabilities, CVE-2019-25629 and CVE-2019-25631, affect AIDA64 5.99.4900 products and can lead to local arbitrary code execution through structured exception handler (SEH) buffer overflows. The flaws were reported for AIDA64 Extreme and AIDA64 Business, respectively, and both are classified as CWE-787 with a CVSS v3.1 score vector of AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high impact across confidentiality, integrity, and availability.

In CVE-2019-25629, an attacker can abuse the Hardware Monitoring logging feature in AIDA64 Extreme by supplying a malicious CSV log file path, triggering shellcode execution when the application processes that path. In CVE-2019-25631, AIDA64 Business is vulnerable through the SMTP display name field in preferences or the report wizard, where an attacker can overwrite SEH pointers and use egg hunter shellcode to gain code execution. Public references for both issues include vendor pages, Exploit-DB listings, and VulnCheck advisories.