Wedding Slideshow Studio Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A buffer overflow vulnerability has been identified in Wedding Slideshow Studio version 1.36. This vulnerability allows attackers to execute arbitrary code by overwriting the registration name field with a malicious payload. Exploitation of this issue demonstrates the ability to run system commands, such as launching the calculator.

Impact

Exploitation of this vulnerability leads to arbitrary code execution on the affected system.

Reproduction

The vulnerability can be reproduced by using a Python script that creates a payload to exploit the buffer overflow. This payload is then pasted into the 'Registration Name' field of the application, which triggers the execution of the embedded code, such as opening the calculator.