Wedding Slideshow Studio CVEs and Security Vulnerabilities

CVE-2020-37161

Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Wedding-slideshow-studio Wedding Slideshow Studio

Products

Wedding Slideshow Studio Wedding Slideshow Studio

CVE-2020-37162

Wedding Slideshow Studio 1.36 - 'Key' Buffer Overflow

Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability in the registration key input that allows attackers to execute arbitrary code by overwriting memory. Attackers can craft a malicious payload of 1608 bytes to trigger a stack-based buffer overflow and execute commands through the registration key field.