CVE-2018-25375SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH

Descripción

SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• ExploitDB-45350 exploit
• Product Reference product
• VulnCheck Advisory: SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH third-party-advisory