Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2019-25318

AVS Audio Converter 9.1.2.600 - Stack Overflow

Description

AVS Audio Converter 9.1.2.600 contains a stack overflow vulnerability that allows attackers to execute arbitrary code by manipulating the output folder text input. Attackers can craft a malicious payload that overwrites stack memory and triggers a bind shell on port 9999 when the 'Browse' button is clicked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avs4You AVS Audio Converter

  • 9.1.2.600affected

References