Executive brief
Easy Video to iPod Converter is a Windows application used to convert video files into formats compatible with Apple iPods. A security flaw in the software's registration process allows a local user to gain unauthorized control over the application. By entering a specially crafted registration name, an attacker can execute malicious code on the computer with the same permissions as the logged-in user.
Technical details
A local stack-based buffer overflow exists in Easy Video to iPod Converter version 1.6.20 within the user registration interface. The vulnerability is triggered when the 'Enter User Name' field receives a payload exceeding 996 bytes. This overflow allows an attacker to overwrite the Structured Exception Handler (SEH) records. By supplying a crafted string containing a 'pop-pop-ret' sequence and shellcode, a local attacker can redirect execution flow to perform arbitrary code execution with the privileges of the current user. Public exploits demonstrate this by launching the Windows calculator (calc.exe).
Affected products
- Ether Software Easy Video to iPod Converter 1.6.20
Timeline
- 2019-01-26: disclosed: Initial exploit code authored by Nawaf Alkeraithe
- 2026-04-12: advisory: CVE published via VulnCheck and NVD