MaLion Security Point RCE via Buffer Overflow and Arbitrary File Placement (CVE-2025-59485/62691/64693)

Key Information Vulnerability Overview Identifier: JVN#76298784 Product: Security Point (Windows) of MaLion by Intercom, Inc. Release Date: 2025-11-25 Update Date: 2025-11-25 Affected Product Versions CVE-2025-59485: Security Point (Windows) of MaLion versions prior to Ver.5.3.4 CVE-2025-62691, CVE-2025-64693: Security Point (Windows) of MaLion versions prior to Ver.7.1.1.9 and Security Point (Windows) of MaLionCloud versions prior to Ver.7.2.0.1 Vulnerability Description Incorrect Default Permissions (CWE-276): - CVSS V3.0 Scores: Base Score 4.8 for Ver.5.3.3 and 3.3 for Ver.7.1.1.8 - CVE: CVE-2025-59485 Stack-based Buffer Overflow Handling HTTP Headers (CWE-121): - CVSS V3.0 Scores: Base Score 9.3 for Ver.5.3.3 and 9.8 for Ver.7.1.1.8 - CVE: CVE-2025-62691 Heap-based Buffer Overflow Handling Content-Length (CWE-122): - CVSS V3.0 Scores: Base Score 9.3 for Ver.5.3.3 and 9.8 for Ver.7.1.1.8 - CVE: CVE-2025-64693 Impact Arbitrary File Placement: Users can place arbitrary files in a specific folder; if the file is a specially crafted DLL, arbitrary code execution is possible (CVE-2025-59485) Remote Code Execution: Remote unauthenticated attackers can send specially crafted requests to execute arbitrary code (CVE-2025-62691, CVE-2025-64693) Solution Update the Product: Upgrade to the latest version as per the vendor’s guidance. - Security Point (Windows) of MaLion: Ver.5.3.4 or later for CVE-2025-59485 - Security Point (Windows) of MaLion: Ver.7.1.1.9 or later & Security Point (Windows) of MaLionCloud: Ver.7.2.0.1 or later for CVE-2025-62691, CVE-2025-64693 Vendor Status Intercom, Inc.: Provides a link to vulnerability details References and More Includes JPCERT/CC appendix, vulnerability analysis, and details on the reporter and coordination process

Goal Reached Thanks to every supporter — we hit 100%!

MaLion Security Point RCE via Buffer Overflow and Arbitrary File Placement (CVE-2025-59485/62691/64693)