CVE-2018-25376

Socusoft 3GP Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft malicious input in the Registration Name and Registration Key fields to overwrite the SEH chain and execute shellcode for reverse shell access.

CVSS v3 8.4 HIGH

8.4^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.5 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://www.dvd-photo-slideshow.com/3gp-photo-slideshow.html
https://www.exploit-db.com/exploits/45352
https://www.vulncheck.com/advisories/socusoft-3gp-photo-slideshow-buffer-overflow-seh

Configurations

No configuration.

History

24 Jul 2026, 10:10

Type	Values Removed	Values Added
Summary		(es) Socusoft 3GP Photo Slideshow 8.05 contiene una vulnerabilidad de desbordamiento de búfer en el diálogo de registro que permite a atacantes locales ejecutar código arbitrario explotando el manejo estructurado de excepciones. Los atacantes pueden elaborar entradas maliciosas en los campos Nombre de Registro y Clave de Registro para sobrescribir la cadena SEH y ejecutar shellcode para obtener acceso a un shell inverso.

25 May 2026, 15:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-05-25 15:16

Updated : 2026-07-24 10:10

NVD link : CVE-2018-25376

Mitre link : CVE-2018-25376

CVE.ORG link : CVE-2018-25376

JSON object : View

Products Affected

No product.

CWE

CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

{"id": "CVE-2018-25376", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2018-25376", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-05-26T15:01:05.959650Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.4, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.5}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "LOCAL", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "SocuSoft", "product": "3GP Photo Slideshow", "versions": [{"status": "affected", "version": "8.05"}]}]}], "published": "2026-05-25T15:16:20.663", "references": [{"url": "http://www.dvd-photo-slideshow.com/3gp-photo-slideshow.html", "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/45352", "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/socusoft-3gp-photo-slideshow-buffer-overflow-seh", "source": "disclosure@vulncheck.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-120"}]}], "descriptions": [{"lang": "en", "value": "Socusoft 3GP Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by exploiting structured exception handling. Attackers can craft malicious input in the Registration Name and Registration Key fields to overwrite the SEH chain and execute shellcode for reverse shell access."}, {"lang": "es", "value": "Socusoft 3GP Photo Slideshow 8.05 contiene una vulnerabilidad de desbordamiento de b\u00fafer en el di\u00e1logo de registro que permite a atacantes locales ejecutar c\u00f3digo arbitrario explotando el manejo estructurado de excepciones. Los atacantes pueden elaborar entradas maliciosas en los campos Nombre de Registro y Clave de Registro para sobrescribir la cadena SEH y ejecutar shellcode para obtener acceso a un shell inverso."}], "lastModified": "2026-07-24T10:10:00.197", "sourceIdentifier": "disclosure@vulncheck.com"}