CVE-2019-25617
MEDIUMEase Audio Converter 5.30 Denial of Service via Audio Cutter
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25617. PoCs published by Achilles.
AI-analyzed exploit summary This exploit generates a malformed MP4 file with an oversized buffer (6000 bytes of 'A' characters) to trigger a denial-of-service (DoS) crash in Ease Audio Converter 5.30 when processed by the Audio Cutter function. The crash occurs due to improper handling of the file's metadata or buffer overflow.
Description
Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter interface to trigger an application crash.
Exploits (1)
This exploit generates a malformed MP4 file with an oversized buffer (6000 bytes of 'A' characters) to trigger a denial-of-service (DoS) crash in Ease Audio Converter 5.30 when processed by the Audio Cutter function. The crash occurs due to improper handling of the file's metadata or buffer overflow.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H