Description
Wedding Slideshow Studio 1.36 contains a buffer overflow vulnerability that allows attackers to execute arbitrary code by overwriting the registration name field with malicious payload. Attackers can craft a specially designed payload to trigger remote code execution, demonstrating the ability to run system commands like launching the calculator.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Wedding Slideshow Studio | Wedding Slideshow Studio | 1.36 | — |
References
- ExploitDB-48050 exploit
- Wedding Slideshow Studio Official Homepage product
- VulnCheck Advisory: Wedding Slideshow Studio 1.36 - 'Name' Buffer Overflow third-party-advisory