CVE Feed

    Dashboard / CVE / CVE-2018-25314

    CVE-2018-25314

    Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious input containing shellcode with structured exception handler (SEH) overwrite to bypass protections and execute code with application privileges.

    Published:Apr 29, 2026
    Last Modified:Apr 30, 2026
    EPS:Apr 29, 2026
    EPSS Score:0.00013
    CVSS Score:8.4

    Affected Products

    Vendor
    Alloksoft
    Product
    Wmv To Avi Mpeg Dvd Wmv Convertor

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High