CVE-2018-25301CWE-120

Easy MPEG to DVD Burner 1.7.11 SEH Local Buffer Overflow

High · published April 29, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

Easy MPEG to DVD Burner 1.7.11 contains a structured exception handling (SEH) local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious username string. Attackers can craft a payload containing junk data, SEH chain pointers, and shellcode that overwrites the SEH handler to redirect execution and run arbitrary commands like opening calc.exe.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00157 · 4.5th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-04-29T19:24Z
EPSS history
Timeline
  • 29 APR 19:24Z
    Easy MPEG to DVD Burner 1.7.11 SEH Local Buffer Overflow
    cvelistv5