CVE-2018-25211 - Vulnerability Analysis

Overview

Allok Video Splitter 3.1.1217 contains a buffer overflow caused by an oversized string in the License Name field, letting local attackers cause denial of service or execute arbitrary code, exploit requires crafted input in registration field.

Severity & Score

Impact

Local attackers can cause denial of service or execute arbitrary code, potentially compromising the system.

Mitigation

Update to the latest version of Allok Video Splitter.

References

• http://www.alloksoft.com/
• https://www.exploit-db.com/exploits/44605
• https://www.vulncheck.com/advisories/allok-video-splitter-buffer-overflow-via-license-name

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner