CVE-2019-25665

CVE-2019-25665 is a local buffer overflow vulnerability affecting River Past Ringtone Converter version 2.7.6.1601 and earlier. The flaw exists in the activation dialog accessible through the Help menu, where attackers can inject oversized input (approximately 300 bytes) into the Email textbox and Activation code textarea fields to trigger a denial of service condition. The vulnerability has a CVSS score of 6.2 (Medium severity) with a local attack vector requiring no user interaction or special privileges. While the attack complexity is low and exploitability is straightforward, the impact is limited to availability, as the vulnerability only enables application crashes without compromising confidentiality or integrity of data. This vulnerability is not listed in the Known Exploited Vulnerabilities catalog and shows minimal community attention, as indicated by its inactive status on vulnerability hotlists. The EPSS score of 0.00015 reflects very low real-world exploitation probability, suggesting this is a low-priority concern for most organizations. No public exploit code is known to be actively distributed.