PT-2025-6712 · Effectmatrix · Effectmatrix Total Video Converter Command Line

Published 2025-02-13 · Updated 2025-02-14 · CVE-2024-53309

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Effectmatrix Total Video Converter Command Line (TVCC) version 2.50

Description A stack-based buffer overflow issue exists when an overly long string is passed to the -f parameter. This can lead to memory corruption, potentially allowing arbitrary code execution or causing a denial of service via specially crafted input.

Recommendations For Effectmatrix Total Video Converter Command Line (TVCC) version 2.50, avoid using overly long strings with the -f parameter until a patch is available. As a temporary workaround, consider restricting input length to prevent potential exploitation.

Exploit

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2024-53309

Affected Products

Effectmatrix Total Video Converter Command Line

References · 5

• 🔥 https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53309/CVE-2024-53309.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-53309 · Security Note
• https://t.me/cvenotify/111332 · Telegram Post
• https://twitter.com/CVEnew/status/1890170595322851445 · Twitter Post
• https://t.me/cvedetector/18050 · Telegram Post