Executive brief
SocuSoft iPod Photo Slideshow is a Windows application used to create photo slideshows for mobile devices. A security flaw in the software's registration process allows a local user to take full control of the computer by entering specially crafted text into the registration name and key fields. This could lead to the execution of malicious commands or the installation of unauthorized software on the affected system.
Technical details
A stack-based buffer overflow (CWE-121) exists in SocuSoft iPod Photo Slideshow version 8.05 and potentially earlier. The vulnerability is located in the registration dialog component, where insufficient bounds checking on the 'Registration Name' and 'Registration Key' input fields allows an attacker to overwrite the Structured Exception Handler (SEH). By providing a long, specially crafted string, a local attacker can redirect execution flow to a payload, such as a reverse shell. Exploitation has been demonstrated on Windows x86 platforms where protections like ASLR and SafeSEH are not enabled for the affected 'DVDPhotoData.dll' module.
Affected products
- SocuSoft iPod Photo Slideshow 8.05 and earlier
Timeline
- 2018-09-08: disclosed: Initial discovery and exploit development by researcher Shubham Singh
- 2018-09-10: other: Exploit published on Exploit-DB
- 2026-05-25: advisory: CVE-2018-25375 published/updated in NVD via VulnCheck