CVE-2018-25211

HIGH

Allok Video Splitter 3.1.1217 Buffer Overflow via License Name

Title source: cna
STIX 2.1

Description

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the License Name registration field, and trigger the overflow when the Register button is clicked.

Exploits (1)

exploitdb WORKING POC
by Achilles · pythondoswindows
https://www.exploit-db.com/exploits/44605

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 5.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-787
Status published
Products (2)
Alloksoft/Splitter 3.1.1217
alloksoft/video_splitter 3.1.1217
Published Mar 26, 2026
Tracked Since Mar 26, 2026