CVE-2019-25701

Summary

Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structured exception handler. Attackers can input a crafted payload exceeding 996 bytes in the username field to trigger SEH overwrite and execute arbitrary code with user privileges.

Affected Software

Weaknesses

• CWE-787: Out-of-bounds Write

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/46255
• http://www.divxtodvd.net/
• http://www.divxtodvd.net/easy_video_to_ipod.exe
• https://www.vulncheck.com/advisories/easy-video-to-ipod-converter-local-buffer-overflow-seh

• ←Previous
• Next→