CVE-2018-25315
HIGHAlloksoft Video joiner 4.6.1217 Buffer Overflow via License Name
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25315. PoCs published by Mohan Ravichandran and Velayutham Selvaraj.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in Alloksoft Video Joiner 4.6.1217 by crafting a malicious payload that overwrites the SEH handler, leading to arbitrary code execution (calc.exe). The exploit generates a file that, when pasted into the License Name field, triggers the vulnerability.
Description
Alloksoft Video joiner 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Name field. Attackers can craft a payload with structured exception handler (SEH) overwrite and shellcode to achieve code execution when the application processes the license registration input.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in Alloksoft Video Joiner 4.6.1217 by crafting a malicious payload that overwrites the SEH handler, leading to arbitrary code execution (calc.exe). The exploit generates a file that, when pasted into the License Name field, triggers the vulnerability.
References (4)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H