Home

Description

Lavavo CD Ripper 4.20 contains a structured exception handling (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Activation Name field. Attackers can craft a payload with controlled buffer data, NSEH jump instructions, and SEH handler addresses to trigger code execution and establish a bind shell on port 3110.

PUBLISHED Reserved 2026-03-22 | Published 2026-03-22 | Updated 2026-03-25 | Assigner VulnCheck




HIGH: 8.6CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
HIGH: 8.4CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Problem types

Out-of-bounds Write

Product status

4.20
affected

Credits

Achilles finder

References

www.exploit-db.com/exploits/46755 (ExploitDB-46755) exploit

www.lavavosoftware.com (Official Product Homepage) product

lavavo-cd-ripper.jaleco.com/download (Product Reference) product

www.vulncheck.com/...avo-cd-ripper-local-seh-buffer-overflow (VulnCheck Advisory: Lavavo CD Ripper 4.20 Local SEH Buffer Overflow) third-party-advisory

cve.org (CVE-2019-25615)

nvd.nist.gov (CVE-2019-25615)

Download JSON