Executive brief
Socusoft 3GP Photo Slideshow is a Windows application used to create video slideshows from digital photos. A security flaw in the software's registration system allows a local user to take full control of the computer by entering specially crafted text into the registration name and key fields. This could lead to unauthorized access to files, data theft, or the installation of malicious software.
Technical details
A classic stack-based buffer overflow (CWE-120) exists in Socusoft 3GP Photo Slideshow version 8.05. The vulnerability is located in the registration dialog component, specifically within the 'Registration Name' and 'Registration Key' input fields. By providing an overly long string, a local attacker can overwrite the Structured Exception Handler (SEH) chain. This allows for the redirection of execution flow to attacker-supplied shellcode, potentially resulting in a reverse shell or arbitrary code execution with the privileges of the application. The exploit is reliable as the affected DLL (DVDPhotoData.dll) was found to lack modern exploit mitigations like ASLR and SafeSEH.
Affected products
- Socusoft 3GP Photo Slideshow 8.05 and earlier
Timeline
- 2018-09-08: other: Exploit code first authored
- 2018-09-10: disclosed: Exploit published on Exploit-DB
- 2026-05-25: advisory: CVE formally published and assigned by VulnCheck