CVE-2018-25314 - Vulnerability Analysis

Overview

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow caused by an oversized string in the License Name field, letting local attackers execute arbitrary code with application privileges, exploit requires local access.

Severity & Score

Impact

Local attackers can execute arbitrary code with application privileges, potentially compromising the system.

Mitigation

Update to the latest version of Allok soft WMV to AVI MPEG DVD WMV Converter.

References

• http://www.alloksoft.com
• http://www.alloksoft.com/wmv.htm
• https://www.exploit-db.com/exploits/44365
• https://www.vulncheck.com/advisories/allok-soft-wmv-to-avi-mpeg-dvd-wmv-converter-buffer-overflow

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner