CVE-2019-25617
MEDIUM SEVERITYCVSS Score & Metrics
Base Score
6.2 / 10
Vector String
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Description
Ease Audio Converter 5.30 contains a denial of service vulnerability in the Audio Cutter function that allows local attackers to crash the application by processing malformed MP4 files. Attackers can create a crafted MP4 file containing an oversized buffer and load it through the Audio Cutter interface to trigger an application crash.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-226
Source
NVD
Vendor
Audiotool
Product
Ease Audio Converter
Discussion (0)
Add Comment
No comments yet. Be the first!