CVE-2018-25323: Allok AVI DivX MPEG Converter SEH Buffer Overflow

The National Vulnerability Database (NVD) reports CVE-2018-25323, a structured exception handler (SEH) buffer overflow vulnerability in Allok AVI DivX MPEG to DVD Converter version 2.6.1217. This flaw, carrying a CVSSv3.1 score of 8.4 (HIGH), enables local attackers to achieve arbitrary code execution. The attack vector is straightforward: an attacker crafts a malicious text file containing shellcode and SEH chain overwrite values.

To trigger the exploit, the attacker pastes this crafted content directly into the License Name field within the application. This action overflows the buffer, allowing the injected shellcode to execute. While this is a local attack requiring user interaction, the high severity score reflects the complete compromise of confidentiality, integrity, and availability once execution is achieved. The NVD notes the Common Weakness Enumeration (CWE) as CWE-120, a classic buffer overflow.

For defenders, this highlights the persistent risk of legacy software, even for tools that seem innocuous. While Allok AVI DivX MPEG Converter might not be enterprise-grade software, it illustrates how niche applications can introduce critical vulnerabilities on endpoints. Attackers often target these less-scrutinized applications as a means to establish a foothold after initial access, or to escalate privileges on a compromised system. The ease of exploitation, requiring only a paste operation, makes this a concerning vector.