CVE-2019-25644
MEDIUMWinMPG Video Convert 9.3.5 Buffer Overflow Local Denial of Service
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2019-25644. PoCs published by Achilles.
AI-analyzed exploit summary This exploit generates a malicious payload file (Evil.txt) containing a large buffer of 'A' characters (6000 bytes) to trigger a local denial-of-service (DoS) in WinMPG Video Convert by overflowing the registration field. The crash occurs when pasting the payload into the 'Name and Registration Code' field during registration.
Description
WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the application by supplying oversized input. Attackers can paste a large payload of 6000 bytes into the Name and Registration Code field to trigger a denial of service condition.
Exploits (1)
This exploit generates a malicious payload file (Evil.txt) containing a large buffer of 'A' characters (6000 bytes) to trigger a local denial-of-service (DoS) in WinMPG Video Convert by overflowing the registration field. The crash occurs when pasting the payload into the 'Name and Registration Code' field during registration.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H