Easy Video to iPod Converter 1.6.20 contains a local buffer overflow in the user registration field. A crafted username input exceeding 996 bytes overwrites the structured exception handler, allowing an attacker who can provide the input locally to execute arbitrary code with the privileges of the user running the application. The vulnerability is a classic buffer overflow (CWE‑787).

The flaw affects the Divxtodvd Easy Video to iPod Converter version 1.6.20. Users running this specific build on any system where the application is installed are at risk; the vulnerability is not tied to a particular operating system but requires the ability to launch the program and supply a username string.

The CVSS score of 8.6 marks this flaw as high severity, and it is not listed in the CISA KEV catalog. No EPSS score is available, but the vulnerability is exploitable by any local user who can launch the application and provide a crafted input. Since it requires local interaction, the scope is limited to local machines, yet the attack could lead to arbitrary code execution with the victim’s privileges, making it a significant risk for any environment where untrusted users can run the application.