8.4Yüksek

CVE-2018-25377Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH

SocuSoft Flash Slideshow Maker Professional Yayım: (5 ay önce)

Açıklama

Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload and paste it into the Name and Code fields of the Help > Register dialog to trigger a reverse shell with system privileges.

Zayıflık türü (CWE): CWE-120

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
socusoft flash slideshow maker 5.20
SocuSoft Flash Slideshow Maker Professional 5.20

Kaynaklar ve yamalar