VULNERABILITY INTELLIGENCE

CVE-2018-25375

CVSS score8.6 HIGH
EPSS probability0.18%
CISA KEVNot currently listed
Published2026-05-25
Last modified2026-07-24
CVSS vectorCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Description

SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.

Weakness classification

  • CWE-121: Stack-based Buffer Overflow

Primary references