by Kastro
Paper/Archive/CVE-2025-64693

CVE-2025-64693

Intercom, Inc. Security Point (Windows) of MaLion — Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length.

EPSS 0.7%CVSS 9.8
critical.is priorityof 100
40
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 54.5.545 × 2010.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.

Affected

ProductAffectedFixed inSource
Security Point (Windows) of MaLionprior to Ver.7.1.1.9–CNA
Security Point (Windows) of MaLionCloudprior to Ver.7.2.0.1–CNA

Scores by source

jpcert (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
jpcert (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refintercom.co.jp/information/2025/1125.htmlrefjvn.jp/en/jp/JVN76298784