CVE-2019-25318 - Vulnerability Analysis

Overview

AVS Audio Converter 9.1.2.600 contains a stack overflow caused by improper handling of the output folder text input, letting attackers execute arbitrary code by triggering a bind shell on port 9999, exploit requires clicking the 'Browse' button.

Severity & Score

Impact

Attackers can execute arbitrary code remotely, potentially gaining full control of the affected system.

Mitigation

Update to the latest version of AVS Audio Converter.

References

• http://www.avs4you.com/
• https://www.exploit-db.com/exploits/47788
• https://www.exploit-db.com/exploits/47810
• https://www.vulncheck.com/advisories/avs-audio-converter-stack-overflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner