Описание
Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.
Ссылки
- Product
- ExploitThird Party AdvisoryVDB Entry
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.36 (включая)
cpe:2.3:a:wedding-slideshow-studio:wedding_slideshow_studio:*:*:*:*:*:*:*:*
EPSS
Процентиль: 58%
0.00904
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-121
Связанные уязвимости
CVSS3: 9.8
github
7 месяцев назад
Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.
EPSS
Процентиль: 58%
0.00904
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-121