CVE-2019-25701

CVE-2019-25701 is a local buffer overflow vulnerability affecting Easy Video to iPod Converter version 1.6.20, triggered through the user registration username field. An attacker can input a malicious payload exceeding 996 bytes to overwrite the structured exception handler and achieve arbitrary code execution with user-level privileges. The vulnerability carries a HIGH severity rating (CVSS 7.8) with a local attack vector requiring low complexity and low privilege requirements. The impact is substantial, affecting confidentiality, integrity, and availability of affected systems. The EPSS score of 0.00014 indicates minimal prevalence relative to other CVEs, suggesting limited real-world exploitation likelihood. This vulnerability is not currently listed on the CISA Known Exploited Vulnerabilities catalog and remains inactive on security hot lists, indicating no evidence of active exploitation in the wild. No significant community attention or publicly available exploit code has been documented, though the technical accessibility of buffer overflow exploitation means security teams should still prioritize patching where the software is deployed.