CVE-2019-25657
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image conversion function. Attackers can paste a large buffer into the source or destination image file fields and click 'Convert Now' to trigger a crash.
Risk Assessment
The risk is a local denial of service, which can disrupt application functionality and impact user productivity.
Recommendation
Upgrade to a newer version of AnyBurn if available, or restrict application access to trusted users only.
Original NVD description (English source)
AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image conversion function. Attackers can paste a large buffer into the source or destination image file fields and click Convert Now to trigger a crash.