Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2019-25331

AVS Audio Converter 9.1 - 'Exit folder' Buffer Overflow

Description

AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to compromise the application and potentially execute arbitrary code.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AVS4YOU AVS Audio Converter

  • 9.1affected

References