CVE-2019-25319

Domain Quester Pro 6.02 contains a stack overflow vulnerability that allows remote attackers to execute arbitrary code by overwriting Structured Exception Handler (SEH) registers. Attackers can craft a malicious payload targeting the 'Domain Name Keywords' input field to trigger an access violation and execute a bind shell on port 9999.

Score

CVSS 3.1 9.8 Critical

Status

Deferred - disclosure@vulncheck.com

Published

2026-02-12

Last modified

2026-02-13

Weaknesses

CWE-121

Affected products

• Domain Quester Pro (Internet-soft)

References

• http://www.internet-soft.com/
• https://www.exploit-db.com/exploits/47825
• https://www.vulncheck.com/advisories/domain-quester-pro-stack-overflow-seh