8.4Yüksek
CVE-2018-25375SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH
Açıklama
SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.
Zayıflık türü (CWE):
CWE-121
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| SocuSoft | iPod Photo Slideshow | 8.05 |
Kaynaklar ve yamalar
- ExploitDB-45350 exploit
- Product Reference product
- VulnCheck Advisory: SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH third-party-advisory