Security Advisory

CVE-2019-25689

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-04-12 12:28:45
Last updated 2026-04-15 15:21:21
Assigner VulnCheck
State PUBLISHED

Description

HTML5 Video Player 1.2.5 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by supplying an oversized key code string. Attackers can craft a malicious payload exceeding 997 bytes and paste it into the KEY CODE field in the Help Register dialog to trigger code execution and spawn a calculator process.