CVE-2019-25604 - Vulnerability Analysis

Overview

DVDXPlayer Pro 5.5 contains a buffer overflow vulnerability in structured exception handling caused by processing malicious playlist files, letting local attackers execute arbitrary code with application privileges, exploit requires crafted .plf file.

Severity & Score

Impact

Local attackers can execute arbitrary code with application privileges, potentially compromising the system.

Mitigation

Update to the latest version of DVDXPlayer Pro.

References

• http://www.dvd-x-player.com/download.html#dvdPlayer
• https://www.exploit-db.com/exploits/46962
• https://www.vulncheck.com/advisories/dvdxplayer-pro-local-buffer-overflow-with-seh

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner