CVE-2018-25375
HIGHSocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2018-25375. PoCs published by Shubham Singh.
AI-analyzed exploit summary This exploit leverages a buffer overflow vulnerability in SocuSoft iPod Photo Slideshow 8.05 via the 'Registration Name' and 'Registration Key' fields, using a SEH overwrite technique to execute a reverse shell payload. The payload is generated using msfvenom and avoids bad characters to ensure successful execution.
Description
SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.
Exploits (1)
This exploit leverages a buffer overflow vulnerability in SocuSoft iPod Photo Slideshow 8.05 via the 'Registration Name' and 'Registration Key' fields, using a SEH overwrite technique to execute a reverse shell payload. The payload is generated using msfvenom and avoids bad characters to ensure successful execution.
References (3)
Scores
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H