HIGH
Easy Video to iPod Converter 1.6.20 Local Buffer Overflow SEH
Published Apr 12, 2026
8.6
HIGHCVSS 4.0
EPSS 0.21%
Description
Easy Video to iPod Converter 1.6.20 contains a local buffer overflow vulnerability in the user registration field that allows local attackers to overwrite the structured exception handler. Attackers can input a crafted payload exceeding 996 bytes in the username field to trigger SEH overwrite and execute arbitrary code with user privileges.
Affected products
-
- Version 1.6.20StatusaffectedConstraints-
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Divxtodvd | Easy Video to iPod Converter | n/a |
|
- 1.6.20
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (5)
- http://www.divxtodvd.net/ productNot Applicable
- http://www.divxtodvd.net/easy_video_to_ipod.exe productPermissions Required
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20133 Advisory
- https://www.exploit-db.com/exploits/46255 exploitVDB Entry
- https://www.vulncheck.com/advisories/easy-video-to-ipod-converter-local-buffer-overflow-seh third-party-advisoryThird Party Advisory
| Link | Providers | Tags |
|---|---|---|
| http://www.divxtodvd.net/ | productNot Applicable | |
| http://www.divxtodvd.net/easy_video_to_ipod.exe | productPermissions Required | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-20133 | Advisory | |
| https://www.exploit-db.com/exploits/46255 | exploitVDB Entry | |
| https://www.vulncheck.com/advisories/easy-video-to-ipod-converter-local-buffer-overflow-seh | third-party-advisoryThird Party Advisory |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulnCheck
Published Apr 12, 2026
Updated Apr 15, 2026
Reserved Apr 5, 2026
Link CVE-2019-25701
CISA Vulnrichment
Updated Apr 15, 2026
ENISA EUVD
EUVD-2019-20133 Assigner VulnCheck
Published Apr 12, 2026
Updated Apr 15, 2026
Exploited since n/a
Link EUVD-2019-20133