{"id":"CVE-2018-25375","state":"PUBLISHED","title":"SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH","description":"SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.","publishedAt":"2026-05-25T14:15:19.284Z","updatedAt":"2026-05-26T12:48:20.832Z","severity":{"score":8.6,"label":"High","version":"4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","source":"VulnCheck"},"assigner":"VulnCheck","products":["SocuSoft iPod Photo Slideshow"],"affected":[{"vendor":"SocuSoft","product":"iPod Photo Slideshow","versions":[{"version":"8.05","status":"affected"}]}],"references":["https://www.exploit-db.com/exploits/45350","http://www.dvd-photo-slideshow.com/ipod-photo-slideshow.html","https://www.vulncheck.com/advisories/socusoft-ipod-photo-slideshow-buffer-overflow-seh"],"weaknesses":["CWE-121"],"ingestedAt":"2026-10-29T19:44:44.295Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2018/25xxx/CVE-2018-25375.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2018-25375","state":"PUBLISHED","datePublished":"2026-05-25T14:15:19.284Z","dateUpdated":"2026-05-26T12:48:20.832Z","assignerShortName":"VulnCheck","assignerOrgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateReserved":"2026-05-25T13:51:14.423Z"},"containers":{"cna":{"title":"SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH","descriptions":[{"lang":"en","value":"SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload."}],"affected":[{"vendor":"SocuSoft","product":"iPod Photo Slideshow","versions":[{"version":"8.05","status":"affected"}]}],"references":[{"url":"https://www.exploit-db.com/exploits/45350","name":"ExploitDB-45350","tags":["exploit"]},{"url":"http://www.dvd-photo-slideshow.com/ipod-photo-slideshow.html","name":"Product Reference","tags":["product"]},{"url":"https://www.vulncheck.com/advisories/socusoft-ipod-photo-slideshow-buffer-overflow-seh","name":"VulnCheck Advisory: SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH","tags":["third-party-advisory"]}],"metrics":[{"cvssV4_0":{"Automatable":"NOT_DEFINED","Recovery":"NOT_DEFINED","Safety":"NOT_DEFINED","attackComplexity":"LOW","attackRequirements":"NONE","attackVector":"LOCAL","baseScore":8.6,"baseSeverity":"HIGH","exploitMaturity":"NOT_DEFINED","privilegesRequired":"NONE","providerUrgency":"NOT_DEFINED","subAvailabilityImpact":"NONE","subConfidentialityImpact":"NONE","subIntegrityImpact":"NONE","userInteraction":"NONE","valueDensity":"NOT_DEFINED","vectorString":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","version":"4.0","vulnAvailabilityImpact":"HIGH","vulnConfidentialityImpact":"HIGH","vulnIntegrityImpact":"HIGH","vulnerabilityResponseEffort":"NOT_DEFINED"},"format":"CVSS"},{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":8.4,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-121","lang":"en","description":"Stack-based Buffer Overflow","type":"CWE"}]}],"providerMetadata":{"shortName":"VulnCheck","orgId":"83251b91-4cc7-4094-a5c7-464a1b83ea10","dateUpdated":"2026-05-25T14:15:19.284Z"},"datePublic":"2018-09-08T00:00:00.000Z","credits":[{"lang":"en","value":"Shubham Singh","type":"finder"}],"x_generator":{"engine":"vulncheck"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-26T12:48:03.190226Z","id":"CVE-2018-25375","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-26T12:48:20.832Z"}}]}}}