PT-2026-41549 · Allok · Allok Avi Divx Mpeg To Dvd Converter

Published 2026-05-17 · Updated 2026-05-17 · CVE-2018-25323

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Allok AVI DivX MPEG to DVD Converter version 2.6.1217

Description A structured exception handler (SEH) buffer overflow allows local attackers to execute arbitrary code by supplying a malicious payload. An attacker can craft a text file containing shellcode and SEH chain overwrite values, then paste this content into the License Name field to trigger the execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2018-25323

Affected Products

Allok Avi Divx Mpeg To Dvd Converter

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2018-25323 · Security Note
• https://t.me/cveNotify/163783 · Telegram Post
• https://exploit-db.com/exploits/44363 · Note
• https://t.me/CVEtracker/54048 · Telegram Post
• https://vulncheck.com/advisories/allok-avi-divx-mpeg-to-dvd-converter-buffer-overflow-seh · Note