Wedding Slideshow Studio Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A buffer overflow vulnerability has been identified in Wedding Slideshow Studio version 1.36. The issue arises in the registration key input field, where attackers can overwrite memory to execute arbitrary code. By crafting a malicious payload of 1608 bytes, a stack-based buffer overflow is triggered, allowing commands to be executed through the registration key field.

Impact

Exploitation of this vulnerability leads to a stack-based buffer overflow, allowing for arbitrary code execution on the affected system.

Reproduction

The vulnerability can be reproduced by using a Python exploit script that generates a payload designed to overflow the buffer in the registration key input. This payload is then pasted into the application, triggering the buffer overflow and executing the embedded shellcode.