Impact
MyVideoConverter Pro 3.14 contains a local buffer overflow that can be triggered by submitting a 10,000‑byte string to the Copy and Paste Registration Code field, causing the program to crash. The overflow does not grant code execution or elevate privileges; it simply brings the application down, denying service to legitimate users. The weakness corresponds to CWE‑787, Buffer Overflow.
Affected Systems
The vulnerability affects Ivideogo’s MyVideoConverter Pro, specifically version 3.14. No other versions or products are listed as affected.
Risk and Exploitability
The vulnerability has a CVSS score of 6.9, indicating moderate severity. The EPSS score is not disclosed, and the issue is not listed in the CISA KEV catalog, suggesting limited evidence of exploitation. The attack vector is local; an attacker with access to the target machine can invoke the crash by entering the crafted string into the registration field. While it does not compromise confidentiality or integrity, it can disrupt availability for users of the application.
OpenCVE Enrichment