River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by su…

CVE-2019-25670 affects River Past Video Cleaner 7.6.3 with a structured exception handler buffer overflow vulnerability. Local attackers can execute arbitrary code by supplying a malicious string in the Lame_enc.dll field. The exploit requires crafting a payload with 280 bytes of padding, a next structured exception handler override, and shellcode. When the application processes the malicious input, it triggers code execution. This vulnerability allows for local privilege escalation and arbitrary code execution on systems running the affected software version.