CVE-2019-25701

HIGH

Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH

Title source: cna

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-25701. PoCs published by Nawaf Alkeraithe.

AI-analyzed exploit summary This exploit demonstrates a local buffer overflow vulnerability in Easy Video to iPod Converter 1.6.20 via the 'Enter User Name' field during registration. It uses a SEH-based overflow with a jump, NOPs, and shellcode to achieve arbitrary code execution.

Description

Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structured exception handler. Attackers can input a crafted payload exceeding 996 bytes in the username field to trigger SEH overwrite and execute arbitrary code with user privileges.

Exploits (1)

exploitdb WORKING POC

by Nawaf Alkeraithe · pythonlocalwindows

https://www.exploit-db.com/exploits/46255

View Code ZIP pw:eip

This exploit demonstrates a local buffer overflow vulnerability in Easy Video to iPod Converter 1.6.20 via the 'Enter User Name' field during registration. It uses a SEH-based overflow with a jump, NOPs, and shellcode to achieve arbitrary code execution.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: Easy Video to iPod Converter 1.6.20

No auth needed

Prerequisites: Vulnerable software installed · User interaction to paste payload into registration field

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter T1203 - Exploitation for Client Execution

devstral-2 · analyzed Apr 12, 2026 Full analysis →

References (4)

Core 4

Core References

Exploit exploit

ExploitDB-46255

https://www.exploit-db.com/exploits/46255

Product product

Official Product Homepage

http://www.divxtodvd.net/

Product product

Product Reference

http://www.divxtodvd.net/easy_video_to_ipod.exe

Third Party Advisory third-party-advisory

VulnCheck Advisory: Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH

https://www.vulncheck.com/advisories/easy-video-to-ipod-converter-local-buffer-overflow-seh

Scores

CVSS v3 8.4

EPSS 0.0021

EPSS Percentile 10.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact total

Details

CWE

CWE-787

Status published

Products (2)

Divxtodvd/Easy Video to iPod Converter 1.6.20

ether_software/easy_video_to_ipod_converter 1.6.20

Published Apr 12, 2026

Tracked Since Apr 12, 2026