Description
WinMPG Video Convert 9.3.5 and older versions contain a buffer overflow vulnerability in the registration dialog that allows local attackers to crash the application by supplying oversized input. Attackers can paste a large payload of 6000 bytes into the Name and Registration Code field to trigger a denial of service condition.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Winmpg | WinMPG Video Convert Local Dos Exploit | 9.3.5 | — |
References
- ExploitDB-46553 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: WinMPG Video Convert 9.3.5 Buffer Overflow Local Denial of Service third-party-advisory