7.8 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Local (L)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): None (N)
- User Interaction (UI): Required (R)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Modified Attack Vector (MAV): Local (L)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): None (N)
- Modified User Interaction (MUI): Required (R)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
Allok Video Splitter 3.1.1217 Buffer Overflow via License Name
Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversized string in the License Name field. Attackers can craft a malicious payload exceeding 780 bytes, paste it into the License Name registration field, and trigger the overflow when the Register button is clicked.
References
-
ExploitDB-44605 exploit
-
Official Product Homepage product
-
VulnCheck Advisory: Allok Video Splitter 3.1.1217 Buffer Overflow via License Name third-party-advisory
Affected products
- ==3.1.1217
Matching in nixpkgs
pkgs.zlsplitter
Versatile splitter plugin for VST3, LV2 and standalone
pkgs.mkgmap-splitter
Utility for splitting OpenStreetMap maps into tiles
pkgs.python312Packages.sentence-splitter
Text to sentence splitter using heuristic algorithm by Philipp Koehn and Josh Schroeder
pkgs.python313Packages.sentence-splitter
Text to sentence splitter using heuristic algorithm by Philipp Koehn and Josh Schroeder
pkgs.python314Packages.sentence-splitter
Text to sentence splitter using heuristic algorithm by Philipp Koehn and Josh Schroeder
pkgs.python312Packages.langchain-text-splitters
LangChain utilities for splitting into chunks a wide variety of text documents
pkgs.python313Packages.langchain-text-splitters
LangChain utilities for splitting into chunks a wide variety of text documents
pkgs.python314Packages.langchain-text-splitters
LangChain utilities for splitting into chunks a wide variety of text documents
Package maintainers
-
@sikmir Nikolay Korotkiy <sikmir@disroot.org>
-
@sarahec Sarah Clark <seclark@nextquestion.net>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@magnetophon Bart Brouns <bart@magnetophon.nl>