Nidesoft DVD Ripper Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A local buffer overflow vulnerability has been identified in Nidesoft DVD Ripper version 5.2.18. The issue arises in the License Code registration parameter, where attackers can execute arbitrary code by crafting a malicious payload and pasting it into the License Code field. This action triggers a stack-based buffer overflow, allowing the execution of shellcode.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, allowing for arbitrary code execution on the affected system.

Reproduction

To reproduce this vulnerability, first run a Python script that generates a file named 'poc.txt' containing the crafted payload. Copy the contents of 'poc.txt' to the clipboard. Then, open Nidesoft DVD Ripper and paste the clipboard contents into the 'License Code' field during registration. This will trigger the buffer overflow and execute the injected shellcode.