Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy…
Priority LOW 35CWE-119Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Buffer overflow in Ether Software Easy MOV Converter 1.4.24, Easy DVD Creator, Easy MPEG/AVI/DIVX/WMV/RM to DVD, Easy Avi/Divx/Xvid to DVD Burner, Easy MPEG to DVD Burner, Easy WMV/ASF/ASX to DVD Burner, Easy RM RMVB to DVD Burner, Easy CD DVD Copy, MP3/AVI/MPEG/WMV/RM to Audio CD Burner, MP3/WAV/OGG/WMA/AC3 to CD Burner, MP3 WAV to CD Burner, My Video Converter, Easy AVI DivX Converter, Easy Video to iPod Converter, Easy Video to PSP Converter, Easy Video to 3GP Converter, Easy Video to MP4 Converter, and Easy Video to iPod/MP4/PSP/3GP Converter allows local attackers to cause a denial of service (SEH overwrite) or possibly have unspecified other impact via a long username.
Why it matters now
EPSS 0.00504 43rd percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 19
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ether_software:easy_avi\/divx\/xvid_to_dvd_burner:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_avi_divx_converter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_cd_dvd_copy:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_dvd_creator:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_mov_converter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_mov_converter:1.4.24:*:*:*:*:*:*:* | 1.4.24 | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_mpeg\/avi\/divx\/wmv\/rm_to_dvd:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_mpeg_to_dvd_burner:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_rm_rmvb_to_dvd_burner:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_video_to_3gp_converter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
- cpe:2.3:a:ether_software:easy_avi\/divx\/xvid_to_dvd_burner:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_avi_divx_converter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_cd_dvd_copy:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_dvd_creator:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_mov_converter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_mov_converter:1.4.24:*:*:*:*:*:*:* Versions 1.4.24 Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_mpeg\/avi\/divx\/wmv\/rm_to_dvd:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_mpeg_to_dvd_burner:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_rm_rmvb_to_dvd_burner:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_video_to_3gp_converter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
Show 9 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:ether_software:easy_video_to_ipod\/mp4\/psp\/3gp_converter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_video_to_ipod_converter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_video_to_mp4_converter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_video_to_psp_converter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:easy_wmv\/asf\/asx_to_dvd_burner:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:mp3\/avi\/mpeg\/wmv\/rm_to_audio_cd_burner:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:mp3\/wav\/ogg\/wma\/ac3_to_cd_burner:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:mp3_wav_to_cd_burner:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
| cpe:2.3:a:ether_software:my_video_converter:-:*:*:*:*:*:*:* | not specified by NVD | Vulnerable | Ether Software |
- cpe:2.3:a:ether_software:easy_video_to_ipod\/mp4\/psp\/3gp_converter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_video_to_ipod_converter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_video_to_mp4_converter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_video_to_psp_converter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:easy_wmv\/asf\/asx_to_dvd_burner:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:mp3\/avi\/mpeg\/wmv\/rm_to_audio_cd_burner:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:mp3\/wav\/ogg\/wma\/ac3_to_cd_burner:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:mp3_wav_to_cd_burner:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
- cpe:2.3:a:ether_software:my_video_converter:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Ether Software
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2017-8367
- 2026-10-03 Alias added: GHSA-757w-f3p9-hx37
References
Sources
- CVE-2017-8367 · CVE Program
- CVE-2017-8367 · NVD
- FIRST EPSS
- GHSA-757w-f3p9-hx37 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences