← volver
CVE-2012-10051

Photodex ProShow Producer 5.0.3256 load File Handling Buffer Overflow

CVSS 8.4 HIGHEPSS 0.3%CWE-121
Vexday Risk Score
36Atención
Decisión SSVC (CISA)
Attend
PoC disponible → seguir de cerca
Madurez del exploit
Exploit funcional
Exploit automatizable disponible (Nuclei/Metasploit).
CVSS 8.4EPSS 0.3%KEV nãoPoC Nuclei Metasploit simPatch
Ciclo de vida
06 jun 2012Exploit Metasploit disponible
08 ago 2025Publicada en NVD
Recomendación: Planificar corrección próxima — ya existe PoC pública.
Photodex ProShow Producer version 5.0.3256 contains a stack-based buffer overflow vulnerability in the handling of plugin load list files. When a specially crafted load file is placed in the installation directory, the application fails to properly validate its contents, leading to a buffer overflow when the file is parsed during startup. Exploitation requires local access to place the file and user interaction to launch the application.
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N