EIP-2026-118208

This exploit targets a local buffer overflow in Zoner Photo Studio v15 by crafting a malicious .reg file that overwrites the EIP register and executes shellcode to launch calc.exe. The PoC uses a JMP SS:[EBP-18] instruction to bypass SafeSEH and includes a shikata_ga_nai-encoded payload.