Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2018-25212

Boxoft wav-wma Converter 1.0 Local Buffer Overflow SEH

Description

Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by crafting malicious WAV files. Attackers can create a specially crafted WAV file with excessive data and ROP gadgets to overwrite the SEH chain and achieve code execution on Windows systems.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Boxoft WAV to WMA Converter

  • 1.0affected

References