CVE-2019-25474 identifies a buffer overflow vulnerability in Easy MP3 Downloader version 4.7.8.8. This flaw allows a local attacker to crash the application by supplying an excessively long unlock code during startup, resulting in a denial of service. Rated as Medium severity (CVSS 6.2), the vulnerability requires local access but is simple to exploit, with the primary impact being application unavailability. There is currently no evidence of active exploitation, nor are public exploit modules or significant community discussion available for this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
| Unknown | Easy MP3 Downloader Denial Of Service | 4.7.8.8CNA affecteddefault unaffected |
CVSS version used by this source: 4.0
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.