What’s Vulnerable › Vulnerabilities

CVE-2018-25375: SocuSoft iPod Photo Slideshow 8.05 Buffer Overflow SEH

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-05-25 · updated 2026-07-24
• Weakness: CWE-121

Description

SocuSoft iPod Photo Slideshow 8.05 contains a buffer overflow vulnerability in the registration dialog that allows local attackers to execute arbitrary code by overwriting the structured exception handler. Attackers can craft malicious input in the Registration Name and Registration Key fields to trigger a stack-based buffer overflow and execute a reverse shell payload.

Affected products

• SocuSoft iPod Photo Slideshow: 8.05

References

• http://www.dvd-photo-slideshow.com/ipod-photo-slideshow.html
• https://www.exploit-db.com/exploits/45350
• https://www.vulncheck.com/advisories/socusoft-ipod-photo-slideshow-buffer-overflow-seh

Get alerted when CVE-2018-25375 or the next vulnerability affects your stack