CVE-2018-25301

HIGH

Easy MPEG to DVD Burner 1.7.11 SEH Local Buffer Overflow

Title source: cna
STIX 2.1

Description

Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious username string. Attackers can craft a payload containing junk data, SEH chain pointers, and shellcode that overwrites the SEH handler to redirect execution and run arbitrary commands like opening calc.exe.

Exploits (1)

exploitdb WORKING POC
by Marwan Shamel · pythonlocalwindows
https://www.exploit-db.com/exploits/44565

Scores

CVSS v3 8.4
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-120
Status published
Products (1)
Easy MPEG/Easy MPEG to DVD Burner 1.7.11
Published Apr 29, 2026
Tracked Since Apr 30, 2026