CVE-2019-25331 - Vulnerability Analysis

Overview

AVS Audio Converter 9.1 contains a local buffer overflow caused by improper handling of the 'Exit folder' input field, letting local attackers overwrite CPU registers and potentially execute arbitrary code, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code by overwriting CPU registers, potentially compromising the application.

Mitigation

Update to the latest version of AVS Audio Converter.

References

• http://www.avs4you.com/
• https://www.exploit-db.com/exploits/47788
• https://www.vulncheck.com/advisories/avs-audio-converter-exit-folder-buffer-overflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner