Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Mersenne |
|
No data.
No data.
No data.
References
History
Sun, 26 Apr 2026 13:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings. | |
| Title | Prime95 29.4b7 Denial of Service via Proxy Password Field | |
| First Time appeared |
Mersenne
Mersenne prime95 |
|
| Weaknesses | CWE-120 | |
| CPEs | cpe:2.3:a:mersenne:prime95:29.4b7:*:*:*:*:*:*:* cpe:2.3:a:mersenne:prime95:30.7:-:*:*:*:*:*:* cpe:2.3:a:mersenne:prime95:30.7:build9:*:*:*:*:*:* |
|
| Vendors & Products |
Mersenne
Mersenne prime95 |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: VulnCheck
Published:
Updated: 2026-04-26T13:19:22.545Z
Reserved: 2026-04-26T13:11:04.130Z
Link: CVE-2018-25293
Vulnrichment
No data.
NVD
No data.
Redhat
No data.
OpenCVE Enrichment
No data.