CVE-2019-25701

HIGH

Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH

Title source: cna
STIX 2.1

Description

Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structured exception handler. Attackers can input a crafted payload exceeding 996 bytes in the username field to trigger SEH overwrite and execute arbitrary code with user privileges.

Exploits (1)

exploitdb WORKING POC
by Nawaf Alkeraithe · pythonlocalwindows
https://www.exploit-db.com/exploits/46255

References (4)

Scores

CVSS v3 8.4
EPSS 0.0001
EPSS Percentile 2.9%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (2)
Divxtodvd/Easy Video to iPod Converter 1.6.20
ether_software/easy_video_to_ipod_converter 1.6.20
Published Apr 12, 2026
Tracked Since Apr 12, 2026