Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2019-25554

Tomabo MP4 Converter 3.25.22 Denial of Service via Name Field

Description

Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Name field. Attackers can trigger a buffer overflow by pasting a large payload into the Name parameter when adding a preset in the Video/Audio Formats options, causing the application to crash when Reset All is clicked.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tomabo MP4 Converter

  • 3.25.22affected

References