Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2018-25314

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow

Description

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious input containing shellcode with structured exception handler (SEH) overwrite to bypass protections and execute code with application privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Alloksoft WMV to AVI MPEG DVD WMV Converter

  • 4.6.1217affected

References