CVE-2018-25323

High

Published: 17/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Allok AVI DivX MPEG to DVD Converter version 2.6.1217 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a text file with a specially crafted buffer containing shellcode and SEH chain overwrite values, then paste the contents into the License Name field to trigger code execution.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows local attackers to execute arbitrary code, potentially leading to system takeover. Exploitation of this flaw could result in data loss or system compromise.

Recommendation

It is recommended to update Allok AVI DivX MPEG to DVD Converter to the latest version that addresses this vulnerability. Additionally, access for local users to the system should be restricted to minimize the risk of exploitation.

Original NVD description (English source)

Allok AVI DivX MPEG to DVD Converter 2.6.1217 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious payload. Attackers can craft a text file with a specially crafted buffer containing shellcode and SEH chain overwrite values, then paste the contents into the License Name field to trigger code execution.