vendor:
ProShow Producer
by:
Julien Ahrens, mr.pr0n, juan
7,8
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: ProShow Producer
Affected Version From: 5.0.3256
Affected Version To: 5.0.3256
Patch Exists: YES
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP SP3 and Windows 7 SP1
2012
Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow
This module exploits a stack-based buffer overflow in Photodex ProShow Producer v5.0.3256 in the handling of the plugins load list file. An attacker must send the crafted "load" file to victim, who must store it in the installation directory. The vulnerability will be triggered the next time ProShow is opened. The module has been tested successfully on Windows XP SP3 and Windows 7 SP1.
Mitigation:
Update to the latest version of Photodex ProShow Producer.
