Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a specially crafted DLL file, arbitrary code could be executed with SYSTEM privilege.

Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file could be placed in the specific folder by a user who can log in to the system where the product's Windows client is installed. If the file is a specially crafted DLL file, arbitrary code could be executed with SYSTEM privilege.

Security Point (Windows) of MaLion provided by Intercom, Inc. contains multiple vulnerabilities listed below.<ul><li>Incorrect default permissions (CWE-276) - CVE-2025-59485</li><li>Stack-based buffer overflow in processing HTTP headers (CWE-121) - CVE-2025-62691</li><li>Heap-based buffer overflow in processing Content-Length (CWE-122) - CVE-2025-64693</li></ul>CVE-2025-59485 Ruslan Sayfiev of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2025-62691, CVE-2025-64693 Denis Faiustov, and Ruslan Sayfiev of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer.