8.4Yüksek
CVE-2018-25377Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH
Açıklama
Flash Slideshow Maker Professional 5.20 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious payload and paste it into the Name and Code fields of the Help > Register dialog to trigger a reverse shell with system privileges.
Zayıflık türü (CWE):
CWE-120
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| socusoft | flash slideshow maker | 5.20 | |
| SocuSoft | Flash Slideshow Maker Professional | 5.20 |
Kaynaklar ve yamalar
- ExploitDB-45355 exploit
- Product Reference product
- VulnCheck Advisory: Flash Slideshow Maker Professional 5.20 Buffer Overflow SEH third-party-advisory