CVE-2018-25301 - Vulnerability Analysis

Overview

Easy MPEG to DVD Burner 1.7.11 contains a local buffer overflow caused by improper handling of a malicious username string, letting local attackers execute arbitrary code by overwriting SEH handler, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code, potentially gaining full control of the affected system.

Mitigation

Update to the latest version or apply vendor patches addressing the buffer overflow.

References

• https://downloads.tomsguide.com/MPEG-Easy-Burner,0301-10418.html
• https://www.exploit-db.com/exploits/44565
• https://www.vulncheck.com/advisories/easy-mpeg-to-dvd-burner-seh-local-buffer-overflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner