CVE-2018-25373
HIGHDVD Photo Slideshow Professional 8.07 Buffer Overflow SEH
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25373. PoCs published by T3jv1l.
AI-analyzed exploit summary This exploit demonstrates a buffer overflow vulnerability in DVD Photo Slideshow Professional 8.07, leveraging SEH (Structured Exception Handler) overwrites to achieve arbitrary code execution. The payload includes a null-free shellcode to spawn a message box, confirming successful exploitation.
Description
SocuSoft DVD Photo Slideshow Professional 8.07 contains a stack-based buffer overflow vulnerability in the registration name field that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft a malicious text file with carefully constructed payload containing junk bytes, SEH chain overwrite, and shellcode, then paste the contents into the Registration Name field via Help > Register to trigger code execution.
Exploits (1)
This exploit demonstrates a buffer overflow vulnerability in DVD Photo Slideshow Professional 8.07, leveraging SEH (Structured Exception Handler) overwrites to achieve arbitrary code execution. The payload includes a null-free shellcode to spawn a message box, confirming successful exploitation.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H