VulnerabilityDeferred

CVE-2024-53310

A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when a specially crafted file is passed to the -ff parameter.

MEDIUM 5.5EPSS 0.27%

Does this matter?

Lower severity and a low EPSS score (0.27%). Track it; it rarely justifies an emergency change on its own.

Description

A Structured Exception Handler based buffer overflow vulnerability exists in Effectmatrix Total Video Converter Command Line (TVCC) 2.50 when a specially crafted file is passed to the -ff parameter. The vulnerability occurs due to improper handling of file input with overly long characters, leading to memory corruption. This can result in arbitrary code execution or denial of service.

CVSS 3.1: 5.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
EPSS: 0.27% probability · 19th percentile
CISA KEV: Not listed
Weakness: CWE-122
Source: cve@mitre.org

References

https://github.com/ufist/vulnerability-research/blob/main/CVE-2024-53310/CVE-2024-53310.md

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.