CVE-2019-25701

弱点类型

Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structured exception handler. Attackers can input a crafted payload exceeding 996 bytes in the username field to trigger SEH overwrite and execute arbitrary code with user privileges.

受影响产品

• ether_software easy_video_to_ipod_converter

参考链接

• http://www.divxtodvd.net/
• http://www.divxtodvd.net/easy_video_to_ipod.exe
• https://www.exploit-db.com/exploits/46255
• https://www.vulncheck.com/advisories/easy-video-to-ipod-converter-local-buffer-overflow-seh