CVE-2018-25377Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH

Beschreibung

Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload and paste it into the Name and Code fields of the Help > Register dialog to trigger a reverse shell with system privileges.

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

Referenzen und Patches

• ExploitDB-45355 exploit
• Product Reference product
• VulnCheck Advisory: Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH third-party-advisory