7.8 HIGH
- CVSS version: 3.1
- Attack vector (AV): LOCAL
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): REQUIRED
- Scope (S): UNCHANGED
- Confidentiality impact (C): HIGH
- Integrity impact (I): HIGH
- Availability impact (A): HIGH
Allok Video Splitter 3.1.1217 Buffer Overflow via License Name
Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the License Name registration field, and trigger the overflow when the Register button is clicked.
References
-
ExploitDB-44605 exploit
-
Official Product Homepage product
-
VulnCheck Advisory: Allok Video Splitter 3.1.1217 Buffer Overflow via License Name third-party-advisory
Affected products
- ==3.1.1217
Matching in nixpkgs
pkgs.zlsplitter
Versatile splitter plugin for VST3, LV2 and standalone
pkgs.mkgmap-splitter
Utility for splitting OpenStreetMap maps into tiles
pkgs.python312Packages.sentence-splitter
Text to sentence splitter using heuristic algorithm by Philipp Koehn and Josh Schroeder
pkgs.python313Packages.sentence-splitter
Text to sentence splitter using heuristic algorithm by Philipp Koehn and Josh Schroeder
pkgs.python314Packages.sentence-splitter
Text to sentence splitter using heuristic algorithm by Philipp Koehn and Josh Schroeder
pkgs.python312Packages.langchain-text-splitters
LangChain utilities for splitting into chunks a wide variety of text documents
pkgs.python313Packages.langchain-text-splitters
LangChain utilities for splitting into chunks a wide variety of text documents
pkgs.python314Packages.langchain-text-splitters
LangChain utilities for splitting into chunks a wide variety of text documents
Package maintainers
-
@sikmir Nikolay Korotkiy <sikmir@disroot.org>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@sarahec Sarah Clark <seclark@nextquestion.net>
-
@magnetophon Bart Brouns <bart@magnetophon.nl>