CVE-2009-1370: Xilisoft Video Converter

High severity, CVSS 9.3. EPSS: 5.9% chance of exploitation in the next 30 days.

Stack-based buffer overflow in ape_plugin.plg in Xilisoft Video Converter 3.1.53.0704n and 5.1.23.0402 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .cue file.

Affected products

• Xilisoft Xilisoft Video Converter: version 3.1.53 only; version 5.1.23 only

Published 2009-04-22. Last modified 2026-06-16.