CVE-2019-25362
CRITICALWMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2019-25362. PoCs published by 4ll4u, Nithoshitha S.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in WMV to AVI MPEG DVD WMV Convertor 4.6.1217, leveraging SEH overwrite to execute a bind shell payload. The shellcode is generated using msfvenom and is designed to work within the constraints of the application's input validation.
Description
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a stack-based buffer overflow in the application's input handling.
Exploits (2)
This exploit demonstrates a buffer overflow vulnerability in WMV to AVI MPEG DVD WMV Convertor 4.6.1217, leveraging SEH overwrite to execute a bind shell payload. The shellcode is generated using msfvenom and is designed to work within the constraints of the application's input validation.
This exploit demonstrates a denial-of-service vulnerability in WMV to AVI MPEG DVD WMV Convertor 4.6.1217 by overflowing the 'License Name and License Code' field with a large buffer of 'A' characters, causing the application to crash.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H