CVE-2019-25331

HIGH

8.4

Descripcion

AVS Audio Converter 9.1 contains a local buffer overflow vulnerability that allows local attackers to overwrite CPU registers by manipulating the 'Exit folder' input field. Attackers can craft a specially designed text file with 264 bytes of padding followed by register overwrite values to compromise the application and potentially execute arbitrary code.

Detalles CVE

Puntuacion CVSS v3.18.4

SeveridadHIGH

Vector CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vector de ataqueLOCAL

ComplejidadLOW

Privilegios requeridosNONE

Interaccion usuarioNONE

Publicado2/12/2026

Ultima modificacion2/13/2026

Fuentenvd

Avistamientos honeypot0

Debilidades (CWE)

CWE-121

Referencias

http://www.avs4you.com/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/47788(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/avs-audio-converter-exit-folder-buffer-overflow(disclosure@vulncheck.com)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.