CVE-2018-25375

Summary

SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.

Affected Software

Weaknesses

• CWE-121: Stack-based Buffer Overflow

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/45350
• http://www.dvd-photo-slideshow.com/ipod-photo-slideshow.html
• https://www.vulncheck.com/advisories/socusoft-ipod-photo-slideshow-buffer-overflow-seh

• ←Previous
• Next→