6.9
Medium
CVE-2019-25474 Easy MP3 Downloader 4.7.8.8 contains a buffer overflow vulnerability that allows local attackers to crash the…
Description
Easy MP3 Downloader 4.7.8.8 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long unlock code. Attackers can generate a file containing 6000 'A' characters and paste the contents into the Unlock Code field during application startup to trigger a denial of service condition.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Easy MP3 Downloader Denial of Service | 4.7.8.8 | No fix stated |