CVE-2018-25294
HIGHCEWE Photoshow 6.3.4 Buffer Overflow Denial of Service
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25294. PoCs published by Gionathan Reale.
AI-analyzed exploit summary This exploit demonstrates a Denial of Service (DoS) vulnerability in CEWE Photoshow 6.3.4 by generating a large buffer of 'A' characters (4000 bytes) and writing it to a file. The payload is designed to crash the application when pasted into the 'email address' and 'Password' fields during login.
Description
CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition.
Exploits (1)
This exploit demonstrates a Denial of Service (DoS) vulnerability in CEWE Photoshow 6.3.4 by generating a large buffer of 'A' characters (4000 bytes) and writing it to a file. The payload is designed to crash the application when pasted into the 'email address' and 'Password' fields during login.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H