CVE-2018-25314 - CVE House

Back to Database

Status published High CVE-2018-25314

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 Buffer Overflow

8.6 CVSS

Vulnerability Description

Allok soft WMV to AVI MPEG DVD WMV Converter 4.6.1217 contains a buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious input containing shellcode with structured exception handler (SEH) overwrite to bypass protections and execute code with application privileges.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-25314

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Mohan Ravichandran & Velayutham Selvaraj

References

More from Alloksoft

View All →

Fast AVI MPEG Joiner 1.2.0812 Buffer Overflow Denial of Service

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Denial of Service

WMV to AVI MPEG DVD WMV Convertor 4.6.1217 - Buffer OverFlow

Allok AVI DivX MPEG to DVD Converter 2.6.1217 Buffer Overflow SEH

Alloksoft Video joiner 4.6.1217 Buffer Overflow via License Name

Affected Vendor

Alloksoft

View all reports →

Affected Software

WMV to AVI MPEG DVD WMV Converter

Vulnerable Versions:

4.6.1217

Timeline

Official Publish: April 29th, 2026

Last Modified: April 30th, 2026

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1055 Process Injection

Defense Evasion

T1105 Ingress Tool Transfer

Command and Control