PT-2026-35264 · Undefined · Undefined

Published 2026-04-26 · Updated 2026-04-26 · CVE-2018-25294

NVD

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CEWE Photoshow 6.3.4 contains a buffer overflow vulnerability in the login dialog that allows attackers to crash the application by submitting oversized input. Attackers can inject 4000 bytes of data into the email address and password fields to trigger a denial of service condition.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2018-25294

Affected Products

Undefined

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-25294 · Security Note
• https://exploit-db.com/exploits/45211 · Note
• https://cewe-photoworld.com/creator-software/windows-download · Note
• https://cewe-photoworld.com · Note
• https://vulncheck.com/advisories/cewe-photoshow-buffer-overflow-denial-of-service · Note