Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2018-25323

Allok AVI DivX MPEG to DVD Converter 2.6.1217 Buffer Overflow SEH

Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a text file with a specially crafted buffer containing shellcode and SEH chain overwrite values, then paste the contents into the License Name field to trigger code execution.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Alloksoft
Products
Allok Avi Divx Mpeg To Dvd Converter Wmv To Avi Mpeg Dvd Wmv Convertor
CVE-2018-25314

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious input containing shellcode with structured exception handler (SEH) overwrite to bypass protections and execute code with application privileges.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Alloksoft
Products
Wmv To Avi Mpeg Dvd Wmv Convertor
CVE-2018-25302

Allok AVI to DVD SVCD VCD Converter 4.0.1217 Buffer Overflow SEH

Allok AVI to DVD SVCD VCD Converter 4.0.1217 contains a structured exception handling (SEH) based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious string in the License Name field. Attackers can craft a payload with junk data, NSEH bypass, SEH handler address, and shellcode that triggers the overflow when pasted into the License Name field and the Register button is clicked, resulting in code execution.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Alloksoft
Products
Wmv To Avi Mpeg Dvd Wmv Convertor
CVE-2019-25362

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the license name and license code fields. Attackers can craft a malicious payload of 6000 bytes to trigger a bind shell on port 4444 by exploiting a stack-based buffer overflow in the application's input handling.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Allok Soft Alloksoft
Products
Wmv To Avi Mpeg Dvd Wmv Convertor Wmv To Avi Mpeg Dvd Wmv Convertor
CVE-2019-25363

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 contains a buffer overflow vulnerability that allows attackers to crash the application by providing an oversized license input. Attackers can generate a 6000-byte payload and paste it into the 'License Name and License Code' field to trigger an application crash.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Allok Soft Alloksoft
Products
Wmv To Avi Mpeg Dvd Wmv Convertor Wmv To Avi Mpeg Dvd Wmv Convertor