Описание
Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.
EPSS
Процентиль: 39%
0.00175
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-121
Связанные уязвимости
CVSS3: 9.8
github
2 дня назад
Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.
EPSS
Процентиль: 39%
0.00175
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-121