8.4Hoch
CVE-2018-25375SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH
Beschreibung
SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.
Schwachstellentyp (CWE):
CWE-121
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| SocuSoft | iPod Photo Slideshow | 8.05 |
Referenzen und Patches
- ExploitDB-45350 exploit
- Product Reference product
- VulnCheck Advisory: SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH third-party-advisory