CVE-2018-25375SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH

Description

SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

References and patches

• ExploitDB-45350 exploit
• Product Reference product
• VulnCheck Advisory: SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH third-party-advisory