CVE-2018-25301
HIGHEasy MPEG to DVD Burner 1.7.11 SEH Local Buffer Overflow
Title source: cnaDescription
Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious username string. Attackers can craft a payload containing junk data, SEH chain pointers, and shellcode that overwrites the SEH handler to redirect execution and run arbitrary commands like opening calc.exe.
Exploits (1)
exploitdb
WORKING POC
by Marwan Shamel · pythonlocalwindows
https://www.exploit-db.com/exploits/44565
Scores
CVSS v3
8.4
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-120
Status
published
Products (1)
Easy MPEG/Easy MPEG to DVD Burner
1.7.11
Published
Apr 29, 2026
Tracked Since
Apr 30, 2026