by Kastro
Paper/Archive/CVE-2025-62691

CVE-2025-62691

Intercom, Inc. Security Point (Windows) of MaLion — Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers.

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.5.545 × 2010.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Affected

ProductAffectedFixed inSource
Security Point (Windows) of MaLionprior to Ver.7.1.1.9–CNA
Security Point (Windows) of MaLionCloudprior to Ver.7.2.0.1–CNA

Scores by source

jpcert (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refintercom.co.jp/information/2025/1125.htmlrefjvn.jp/en/jp/JVN76298784