CVE-2019-25665 - River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS

Back Back to CVE browser

MEDIUM

River Past Ringtone Converter 2.7.6.1601 Buffer Overflow DoS

Published Apr 5, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.19%

Description

River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fields. Attackers can paste 300 bytes of data into the Email textbox and Activation code textarea via the Help menu's Activate dialog to trigger a denial of service condition.

Affected products

Vendor Riverpast Product River Past Ringtone Converter Default
n/a
- Version
  2.7.6.1601
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Riverpast

River Past Ringtone Converter

n/a

Version	Status	Constraints
2.7.6.1601	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (3)

http://www.riverpast.com/
product
https://www.exploit-db.com/exploits/46312
exploitVDB Entry
https://www.vulncheck.com/advisories/river-past-ringtone-converter-buffer-overflow-dos
third-party-advisoryThird Party Advisory

Link	Providers	Tags
http://www.riverpast.com/		product
https://www.exploit-db.com/exploits/46312		exploitVDB Entry
https://www.vulncheck.com/advisories/river-past-ringtone-converter-buffer-overflow-dos		third-party-advisoryThird Party Advisory