CVE-2018-25322
HighSummary
Allok Fast AVI MPEG Splitter version 1.2 contains a stack-based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name string. Attackers can craft a payload of 780 bytes to trigger the overflow and execute code with application privileges.
Risk Assessment
This vulnerability poses a serious risk to organizations as it allows local attackers to gain control over the system, potentially leading to data loss or unauthorized access.
Recommendation
It is recommended to update Allok Fast AVI MPEG Splitter to the latest version to mitigate this vulnerability and to monitor systems for potential attack attempts.
Original NVD description (English source)
Allok Fast AVI MPEG Splitter 1.2 contains a stack based buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious license name string. Attackers can craft a payload with 780 bytes of junk data followed by structured shellcode and place it in the License Name field to trigger the overflow and execute code with application privileges.