CVE-2017-8367 - CVE House
Back to Database
Status published High CVE-2017-8367

Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy...

Vulnerability Description

Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner, MP3/WAV/OGG/WMA/AC3 to CD Burner, MP3 WAV to CD Burner, My Video Converter, Easy AVI DivX Converter, Easy Video to iPod Converter, Easy Video to PSP Converter, Easy Video to 3GP Converter, Easy Video to MP4 Converter, and Easy Video to iPod/MP4/PSP/3GP Converter allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long username.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-8367

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

ether software

View all reports →

Affected Software

easy avi\/divx\/xvid to dvd burner, easy avi divx converter, easy cd dvd copy, easy dvd creator, easy mov converter, easy mpeg\/avi\/divx\/wmv\/rm to dvd, easy mpeg to dvd burner, easy rm rmvb to dvd burner, easy video to 3gp converter, easy video to ipod\/mp4\/psp\/3gp converter, easy video to ipod converter, easy video to mp4 converter, easy video to psp converter, easy wmv\/asf\/asx to dvd burner, mp3\/avi\/mpeg\/wmv\/rm to audio cd burner, mp3\/wav\/ogg\/wma\/ac3 to cd burner, mp3 wav to cd burner, my video converter
Vulnerable Versions:
1.4.24

Timeline

Official Publish: April 30th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.