CVE-2019-25595

MediumCVSS 6.2

Published: 22/03/2026(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.12%

2th percentile - higher than 2% of all known CVEs

Summary

Vulnerability in jetAudio 8.1.7.20702 Basic allows local attackers to crash the application by supplying an excessively long string through the URL input handler. Attackers can trigger the crash by pasting a buffer of 5000 characters into the Open URL dialog, causing the application to terminate abnormally.

Risk Assessment

Risk of application crash, potentially leading to loss of unsaved data or disruption of user work.

Recommendation

Update jetAudio to the latest version if available and avoid pasting very long strings into the URL field.

Other vulnerabilities in jetAudio

CVE-2006-2910Medium
Buffer overflow in jetAudio 6.2.6.8330 (Basic), and possibly other versions, allows user-assisted attackers to execute arbitrary code via an audio file (such as WMA) with long ID Tag values including Title, Author, and Album. The overflow triggers in the tooltip display string if the sound card driver is disabled or incorrectly installed.

Original NVD description (English source)

jetAudio 8.1.7.20702 Basic contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string through the URL input handler. Attackers can trigger the crash by pasting a buffer of 5000 characters into the Open URL dialog, causing the application to terminate abnormally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS