vendor:
WinAVI iPod/3GP/MP4/PSP Converter
by:
Achilles
7.8
CVSS
HIGH
Local Denial of Service
400
CWE
Product Name: WinAVI iPod/3GP/MP4/PSP Converter
Affected Version From: 4.4.2
Affected Version To: 4.4.2
Patch Exists: YES
Related CWE: N/A
CPE: a:winavi:winavi_ipod/3gp/mp4/psp_converter
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows XP SP3 EN, Windows 7 x64 Sp1
2019
WinAVI iPod/3GP/MP4/PSP Converter 4.4.2 Local Dos Exploit
A Local Denial of Service vulnerability exists in WinAVI iPod/3GP/MP4/PSP Converter 4.4.2. An attacker can create a malicious AVI file with 6000 bytes of 'A' characters and open it in WinAVI.exe to cause a crash.
Mitigation:
Upgrade to the latest version of WinAVI iPod/3GP/MP4/PSP Converter.