PT-2026-35984 · Undefined · Undefined

Published 2026-04-29 · Updated 2026-04-29 · CVE-2018-25301

NVD

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious username string. Attackers can craft a payload containing junk data, SEH chain pointers, and shellcode that overwrites the SEH handler to redirect execution and run arbitrary commands like opening calc.exe.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2018-25301

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25301 · Security Note
• https://exploit-db.com/exploits/44565 · Note
• https://vulncheck.com/advisories/easy-mpeg-to-dvd-burner-seh-local-buffer-overflow · Note
• https://downloads.tomsguide.com/MPEG-Easy-Burner,0301-10418.html · Note