CVE-2019-25670
Received
Received - Intake
Structured Exception Handler Buffer Overflow in River Past Video Cleaner
Publication date: 2026-04-05
Last updated on: 2026-04-27
Assigner: VulnCheck
Description
Description
River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the Lame_enc.dll field. Attackers can craft a payload with 280 bytes of padding, a next structured exception handler override, and shellcode to trigger code execution when the application processes the input.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| river_past_video_cleaner_project | river_past_video_cleaner | to 7.6.3 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |