Description
Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structured exception handler. Attackers can input a crafted payload exceeding 996 bytes in the username field to trigger SEH overwrite and execute arbitrary code with user privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Divxtodvd | Easy Video to iPod Converter | 1.6.20 | — |
References
- ExploitDB-46255 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH third-party-advisory