RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to exec…

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Apr 5, 2026 · NIST NVD

   Detected

   RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain and shellcode that triggers code execution when pasted into the Port field and the Change button is cl

2. Jul 24, 2026 · NIST NVD

   Updated

   RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP RET gadget chain and shellcode that triggers code execution when pasted into the Port field and the Change button is cl

Affected

• cpe crun/realterm2.0.0.70

Sources

• CVE.orgVulnerability recordCVE-2019-25679

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2019-25679

  RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a buffer overflow payload with a POP POP

  nvd.nist.gov

References

• Product · realterm.sourceforge.io
• Product · sourceforge.net
• Exploit · exploit-db.com
• Third Party Advisory · vulncheck.com