Description
WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to crash the application by providing an oversized license input. Attackers can generate a 6000-byte payload and paste it into the 'License Name and License Code' field to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Alloksoft | WMV to AVI MPEG DVD WMV Convertor | 4.6.1217 | — |
References
- ExploitDB-47563 exploit
- Vendor Homepage product
- Archived Software Download Page product
- VulnCheck Advisory: WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service third-party-advisory