Buffer Overflow Vulnerability in Fast AVI MPEG Joiner by Allok Soft
CVE-2019-25606

6.8MEDIUM

Key Information:

Vendor

Alloksoft

Status
Fast Avi Mpeg Joiner
Vendor
CVE Published:
22 March 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2019-25606?

Fast AVI MPEG Joiner version 1.2.0812 is susceptible to a buffer overflow vulnerability that permits local attackers to crash the application. By injecting an oversized payload, specifically a text file with 6000 bytes of data into the License Name field, an attacker can trigger a denial of service condition upon clicking the Register button. This issue exposes users to potential disruption and renders the software inoperable.

Affected Version(s)

Fast AVI MPEG Joiner 1.2.0812

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2019-25606 - Proof of Concept

References

https://www.exploit-db.com/exploits/46929
exploit
http://www.alloksoft.com
product
http://www.alloksoft.com/fast_avimpegjoiner.exe
product

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Achilles
.