CVE-2018-25211

HIGH

7.8

Descricao

Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the License Name registration field, and trigger the overflow when the Register button is clicked.

Detalhes CVE

Pontuacao CVSS v3.17.8

SeveridadeHIGH

Vetor CVSSCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Vetor de ataqueLOCAL

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioREQUIRED

Publicado3/26/2026

Ultima modificacao3/27/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

alloksoft:video_splitter

Fraquezas (CWE)

CWE-787

Referencias

http://www.alloksoft.com/(disclosure@vulncheck.com)

https://www.exploit-db.com/exploits/44605(disclosure@vulncheck.com)

https://www.vulncheck.com/advisories/allok-video-splitter-buffer-overflow-via-license-name(disclosure@vulncheck.com)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.