CVE-2019-25475CWE-787

SQL Server Password Changer 1.90 Denial of Service Buffer Overflow

Medium · published March 11, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

SQL Server Password Changer 1.90 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload. Attackers can inject 6000 bytes of data into the User Name and Registration Code field to trigger a denial of service condition.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00128 · 2.2th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2026-03-11T18:23Z
EPSS history
Timeline
  • 11 MAR 18:23Z
    SQL Server Password Changer 1.90 Denial of Service Buffer Overflow
    cvelistv5