Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2019-25362

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow

Description

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a stack-based buffer overflow in the application's input handling.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Alloksoft WMV to AVI MPEG DVD WMV Convertor

  • 4.6.1217affected

References