8.4High
CVE-2018-25377Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH
Description
Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload and paste it into the Name and Code fields of the Help > Register dialog to trigger a reverse shell with system privileges.
Weakness (CWE):
CWE-120
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| socusoft | flash slideshow maker | 5.20 | |
| SocuSoft | Flash Slideshow Maker Professional | 5.20 |
References and patches
- ExploitDB-45355 exploit
- Product Reference product
- VulnCheck Advisory: Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH third-party-advisory