A local buffer overflow vulnerability in Prime95 version 29.4b8 allows attackers to achieve arbitrary code execution by leveraging insecure handling of proxy configuration strings.

This is a stack-based buffer overflow (CWE-120) triggered when the application fails to validate the size of input provided to the proxy hostname field in PrimeNet settings. The vulnerability requires no authentication as it is triggered locally by a user or an attacker with access to the application interface.

The ability to execute arbitrary system commands poses a significant risk to the integrity and security of the host system. Given the CVSS score of 8.4, this vulnerability is classified as High severity, as successful exploitation results in full system control for the attacker, potentially leading to unauthorized data access, malware installation, or persistent system compromise.

Immediate Action: Users should immediately update to the latest available version of Prime95, as the identified version 29.4b8 is confirmed vulnerable.

Proactive Monitoring: Security teams should monitor endpoint logs for suspicious child processes spawned by the Prime95 application, such as command shells or unauthorized utilities.

Compensating Controls: Ensure that the application is executed with the least privilege necessary, and utilize endpoint protection software to block unauthorized execution of binaries from non-standard directories.

Public Exploit Available: Yes, a published proof-of-concept exists in the form of an Exploit-DB entry (EDB-ID 44649).

The presence of a functional proof-of-concept makes this vulnerability a credible threat to any environment where this specific version of Prime95 is deployed. Administrators must prioritize updating the software to a patched release or restricting access to the application configuration settings to prevent unauthorized local manipulation.