CVE-2018-25293
Prime95 29.4b7 Denial of Service via Proxy Password Field
CVSS Score
6.2
EPSS Score
0.0%
EPSS Percentile
0th
Prime95 29.4b7 contains a buffer overflow vulnerability in the PrimeNet connection dialog that allows local attackers to crash the application by supplying an excessively long string in the optional proxy password field. Attackers can trigger a denial of service by entering a 6000-byte payload into the proxy password parameter, causing the application to crash when processing the connection settings.
| CWE | CWE-120 |
| Vendor | mersenne |
| Product | prime95 |
| Published | Apr 26, 2026 |
Stay Ahead of the Next One
Get instant alerts for mersenne prime95
Be the first to know when new medium vulnerabilities affecting mersenne prime95 are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
Mersenne / Prime95
29.4b7
References
Credits
Gionathan "John" Reale