What’s Vulnerable › Vulnerabilities

CVE-2019-25609: JetAudio jetCast Server 2.0 Local SEH Buffer Overflow

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-22 · updated 2026-06-17
• Weakness: CWE-787

Description

JetAudio jetCast Server 2.0 contains a stack-based buffer overflow vulnerability in the Log Directory configuration field that allows local attackers to overwrite structured exception handling pointers. Attackers can inject alphanumeric encoded shellcode through the Log Directory field to trigger an SEH exception handler and execute arbitrary code with application privileges.

Affected products

• Jetaudio Server: 2.0

References

• http://www.jetaudio.com/
• http://www.jetaudio.com/download/5fc01426-741d-41b8-a120-d890330ec672/jetAudio/Download/jetCast/build/JCS2000.exe
• https://www.exploit-db.com/exploits/46854
• https://www.vulncheck.com/advisories/jetaudio-jetcast-server-local-seh-buffer-overflow

Get alerted when CVE-2019-25609 or the next vulnerability affects your stack