Security Point (Windows) Of Malion
Approved changes feed: RSS · Atom
cpe:2.3:a:intercom,_inc.:security_point_(windows)_of_malion:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Intercom, Inc. (89f0f2fc-1e9a-541f-8394-d21d073becac) |
|---|---|
| Product | Security Point (Windows) Of Malion (32e7aa97-c5e6-5cad-b218-9f495ed54a6c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64693 |
vulnerable | 2026-06-08 07:39:20.162827 |
Details available
CRITICAL (9.8)
Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.
Published: 2025-11-25T07:21:10.593Z
Updated: 2025-11-25T20:18:57.060Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-62691 |
vulnerable | 2026-06-08 07:39:16.476396 |
Details available
CRITICAL (9.8)
Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers. Receiving a specially crafted request from a remote unauthenticated attacker could lead to arbitrary code execution with SYSTEM privilege.
Published: 2025-11-25T07:21:02.412Z
Updated: 2025-11-25T20:17:50.931Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-59485 |
vulnerable | 2026-06-08 07:35:22.065892 |
Details available
LOW (3.3)
Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a specially crafted DLL file, arbitrary code could be executed with SYSTEM privilege.
Published: 2025-11-25T07:20:38.296Z
Updated: 2025-11-25T14:42:13.300Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.