PT-2017-18294 · Ether · Easy Avi Divx Converter+17

Published 2017-04-30 · Updated 2017-05-17 · CVE-2017-8367

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ether Software Easy MOV Converter version 1.4.24 Ether Software Easy DVD Creator (affected versions not specified) Ether Software Easy MPEG/AVI/DIVX/WMV/RM to DVD (affected versions not specified) Ether Software Easy Avi/Divx/Xvid to DVD Burner (affected versions not specified) Ether Software Easy MPEG to DVD Burner (affected versions not specified) Ether Software Easy WMV/ASF/ASX to DVD Burner (affected versions not specified) Ether Software Easy RM RMVB to DVD Burner (affected versions not specified) Ether Software Easy CD DVD Copy (affected versions not specified) Ether Software MP3/AVI/MPEG/WMV/RM to Audio CD Burner (affected versions not specified) Ether Software MP3/WAV/OGG/WMA/AC3 to CD Burner (affected versions not specified) Ether Software MP3 WAV to CD Burner (affected versions not specified) Ether Software My Video Converter (affected versions not specified) Ether Software Easy AVI DivX Converter (affected versions not specified) Ether Software Easy Video to iPod Converter (affected versions not specified) Ether Software Easy Video to PSP Converter (affected versions not specified) Ether Software Easy Video to 3GP Converter (affected versions not specified) Ether Software Easy Video to MP4 Converter (affected versions not specified) Ether Software Easy Video to iPod/MP4/PSP/3GP Converter (affected versions not specified)

Description A buffer overflow issue exists, allowing local attackers to cause a denial of service (SEH overwrite) or possibly have other unspecified impacts via a long username.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-8367

Affected Products

Easy Avi Divx Converter

Easy Avi/Divx/Xvid To Dvd Burner

Easy Cd Dvd Copy

Easy Dvd Creator

Easy Mov Converter

Easy Mpeg To Dvd Burner

Easy Mpeg/Avi/Divx/Wmv/Rm To Dvd

Easy Rm Rmvb To Dvd Burner

Easy Video To 3Gp Converter

Easy Video To Mp4 Converter

Easy Video To Psp Converter

Easy Video To Ipod Converter

Easy Video To Ipod/Mp4/Psp/3Gp Converter

Easy Wmv/Asf/Asx To Dvd Burner

Mp3 Wav To Cd Burner

Mp3/Avi/Mpeg/Wmv/Rm To Audio Cd Burner

Mp3/Wav/Ogg/Wma/Ac3 To Cd Burner

Video Converter

References · 4

• 🔥 https://github.com/offensive-security/exploit-database/blob/master/platforms/windows/dos/41911.py · Exploit
• 🔥 https://exploit-db.com/exploits/41911 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-8367 · Security Note
• https://osv.dev/vulnerability/CVE-2017-8367 · Vendor Advisory