https://feed.craftedsignal.io/vendors/alloksoft/Trending threats, MITRE ATT&CK coverage, and detection metadata — refreshed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 29 Apr 2026 20:16:27 +0000https://feed.craftedsignal.io/briefs/2026-04-alloksoft-overflow/Wed, 29 Apr 2026 20:16:27 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-04-alloksoft-overflow/Alloksoft Video Joiner 4.6.1217 is vulnerable to a local buffer overflow (CVE-2018-25315) allowing attackers to execute arbitrary code via a crafted license name.Alloksoft Video Joiner version 4.6.1217 is susceptible to a buffer overflow vulnerability (CVE-2018-25315). This vulnerability allows a local attacker to execute arbitrary code on a vulnerable system. The attack involves crafting a malicious string and supplying it to the “License Name” field of the application during registration. Exploitation occurs due to the application’s failure to properly validate the length of the input, allowing a buffer overflow to occur. The attacker leverages Structured Exception Handler (SEH) overwrite and injects shellcode to gain code execution in the context of the application. This vulnerability was reported in April 2026.

Attack Chain

1. The attacker gains local access to a system with Alloksoft Video Joiner 4.6.1217 installed.
2. The attacker identifies the “License Name” field within the application’s registration process as a potential vulnerability point.
3. The attacker crafts a malicious string that exceeds the expected buffer size for the “License Name” field.
4. The malicious string includes an SEH overwrite payload, redirecting execution flow to the attacker’s controlled memory.
5. The crafted string also contains shellcode designed to perform arbitrary code execution.
6. The attacker inputs the malicious string into the “License Name” field and submits the registration form.
7. The application attempts to process the oversized string, triggering a buffer overflow.
8. The SEH overwrite redirects execution to the injected shellcode, granting the attacker arbitrary code execution within the context of the Alloksoft Video Joiner process.

Impact

Successful exploitation of this buffer overflow vulnerability allows a local attacker to execute arbitrary code with the privileges of the Alloksoft Video Joiner application. This could lead to complete system compromise, data theft, or installation of malware. While the specific number of affected users is unknown, any system running the vulnerable version of the software is at risk.

Recommendation

• Monitor process creations for VideoJoiner.exe spawning unusual child processes, indicative of code execution stemming from the overflow.
• Consider deploying network egress rules to block connections originating from VideoJoiner.exe to external IPs to prevent command and control.
• Implement application control policies to prevent the execution of unsigned or untrusted code within the context of VideoJoiner.exe.

]]>highadvisorybuffer-overflowcode-executioncve-2018-25315windowshttps://feed.craftedsignal.io/briefs/2026-04-allok-video-buffer-overflow/Wed, 29 Apr 2026 20:16:25 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-04-allok-video-buffer-overflow/Allok Video to DVD Burner 2.6.1217 contains a stack-based buffer overflow vulnerability (CVE-2018-25303) in the License Name field, allowing a local attacker to execute arbitrary code by triggering a structured exception handler (SEH) overwrite.A stack-based buffer overflow vulnerability exists in Allok Video to DVD Burner version 2.6.1217. This vulnerability, identified as CVE-2018-25303, resides within the “License Name” field of the application. A local attacker can exploit this flaw by crafting a malicious input designed to overwrite the Structured Exception Handler (SEH). Successful exploitation enables the attacker to execute arbitrary code within the context of the application. The vulnerability was reported on 2026-04-29. This is important for defenders because successful exploitation can lead to complete system compromise on vulnerable machines.

Attack Chain

1. The attacker gains local access to a system with Allok Video to DVD Burner 2.6.1217 installed.
2. The attacker crafts a malicious input string consisting of 780 bytes of arbitrary data.
3. The attacker appends SEH chain pointers and shellcode to the crafted input string.
4. The attacker opens the Allok Video to DVD Burner application and navigates to the registration window.
5. The attacker pastes the malicious input string into the “License Name” field.
6. The application attempts to process the oversized input, triggering the buffer overflow.
7. The SEH is overwritten with the attacker’s controlled pointers.
8. The shellcode is executed, giving the attacker arbitrary code execution on the system.

Impact

Successful exploitation of this vulnerability allows a local attacker to execute arbitrary code within the context of the Allok Video to DVD Burner application. This could lead to complete system compromise, including data theft, installation of malware, or other malicious activities. The vulnerability affects version 2.6.1217 of the software. The number of potential victims depends on the number of installations of the vulnerable software.

Recommendation

• Monitor process creations for Allok Video to DVD Burner and unusual child processes using the process creation rule below.
• Monitor for registry modifications performed by the vulnerable application that may indicate persistence.
• Due to the age of the application, consider whether it should continue to be used within the environment.

]]>highadvisorycvebuffer overflowseh overwrite