CVE-2019-5618

HIGH

A-PDF WAV to MP3 1.0.0 - Stack-based Buffer Overflow

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2019-5618. PoCs published by d4rk-h4ck3r, Dr_IDE, dookie, including Metasploit module exploits/windows/fileformat/a_pdf_wav_to_mp3.

AI-analyzed exploit summary This Metasploit module exploits a buffer overflow in A-PDF WAV to MP3 v1.0.0 via a crafted m3u file, allowing arbitrary code execution. It uses SEH overwrites and a structured payload to achieve RCE on Windows systems.

Description

A-PDF WAV to MP3 version 1.0.0 suffers from an instance of CWE-121: Stack-based Buffer Overflow.

Exploits (1)

metasploit WORKING POC NORMAL

by d4rk-h4ck3r, Dr_IDE, dookie · rubypocwin

https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/a_pdf_wav_to_mp3.rb

View Code ZIP pw:eip

This Metasploit module exploits a buffer overflow in A-PDF WAV to MP3 v1.0.0 via a crafted m3u file, allowing arbitrary code execution. It uses SEH overwrites and a structured payload to achieve RCE on Windows systems.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Moderate

Reliability

Reliable

Target: A-PDF WAV to MP3 v1.0.0

No auth needed

Prerequisites: Victim must open the malicious m3u file with A-PDF WAV to MP3 v1.0.0

MITRE ATT&CK

T1203 - Exploitation for Client Execution T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Third Party Advisory x_refsource_misc

https://www.rapid7.com/db/modules/exploit/windows/fileformat/a_pdf_wav_to_mp3

Scores

CVSS v3 7.8

EPSS 0.0218

EPSS Percentile 79.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE

CWE-121 CWE-787

Status published

Products (1)

a-pdf/wav_to_mp3 1.0.0

Published Apr 29, 2020

Tracked Since Feb 18, 2026