CVE-2018-25377Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH

Descripción

Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload and paste it into the Name and Code fields of the Help > Register dialog to trigger a reverse shell with system privileges.

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

Referencias y parches

• ExploitDB-45355 exploit
• Product Reference product
• VulnCheck Advisory: Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH third-party-advisory